Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    01338899.exe

  • Size

    325KB

  • Sample

    230615-n78q1agd6y

  • MD5

    97c4dc2b0307ce4aeb24e686fdee6b50

  • SHA1

    0d89a517f48732bb04744da77985fa48c70e2ef3

  • SHA256

    1e7277d2aef459eea9646a76032f1bd4384f7cedac8f4cff3670a601307ab25a

  • SHA512

    9ce38aca4cde2eb0a49141dc8b9007caedd384d802a94ececd1d506b9e4fafbb91ca9baded3af9098cf73cc6525093699035791de1741e0cc152b3c45084c074

  • SSDEEP

    3072:2U2nZkUW9CI+hGwu1xb7xPSPZEm6rLVoGU98nPabRIYFUlSxc2hNl6ixqq/cv/w0:2Vn8Hx6laSXnhzsYqtplWi88EssTKhn

Score
10/10

Malware Config

Extracted

Family

strela

C2

91.215.85.209

Targets

    • Target

      01338899.exe

    • Size

      325KB

    • MD5

      97c4dc2b0307ce4aeb24e686fdee6b50

    • SHA1

      0d89a517f48732bb04744da77985fa48c70e2ef3

    • SHA256

      1e7277d2aef459eea9646a76032f1bd4384f7cedac8f4cff3670a601307ab25a

    • SHA512

      9ce38aca4cde2eb0a49141dc8b9007caedd384d802a94ececd1d506b9e4fafbb91ca9baded3af9098cf73cc6525093699035791de1741e0cc152b3c45084c074

    • SSDEEP

      3072:2U2nZkUW9CI+hGwu1xb7xPSPZEm6rLVoGU98nPabRIYFUlSxc2hNl6ixqq/cv/w0:2Vn8Hx6laSXnhzsYqtplWi88EssTKhn

    Score
    10/10
    • Strela

      An info stealer targeting mail credentials first seen in late 2022.

    • Reads user/profile data of local email clients

      Email clients store some user data on disk where infostealers will often target it.

MITRE ATT&CK Enterprise v6

Tasks