General
- Target 24493246931877.js
- Size 1.3MB
- Sample231112-kfw2caec78
- SHA256 786fc6cdfdd0dcae3e1f1641c28fa8f0474b9016a0ffd82d42f23d214f837efd
- MD5 fdda931653ce8bad08dd9160c32f6900
- SHA1 784bf81746e83c49ea75fbb5978fafae3c6b3245
- SHA512 3b5336c71307a18d340c8b5b7e0c6d3a1c4ad801715b4d202b8bedb61462028d2a584318996d16f9b742338c0ce883d0fe2d0ab526d2f314796f3c0ddbaf0d59
- SSDEEP 12288:+JJFpH1MWiEpIzD7Wwndqw9tEbME7y3IgVjnHdE2Zv/ukqmSVelQJnrSe5JFd4OS:+HVM993s7y3Igbltd/S3sPvyBPwUbU5
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
24493246931877.js
Resource
win7-20231023-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
strela
C2
-
193.109.85.77
Targets
-
- Target 24493246931877.js
- Size 1.3MB
- SHA256 786fc6cdfdd0dcae3e1f1641c28fa8f0474b9016a0ffd82d42f23d214f837efd
- MD5 fdda931653ce8bad08dd9160c32f6900
- SHA1 784bf81746e83c49ea75fbb5978fafae3c6b3245
- SHA512 3b5336c71307a18d340c8b5b7e0c6d3a1c4ad801715b4d202b8bedb61462028d2a584318996d16f9b742338c0ce883d0fe2d0ab526d2f314796f3c0ddbaf0d59
- SSDEEP 12288:+JJFpH1MWiEpIzD7Wwndqw9tEbME7y3IgVjnHdE2Zv/ukqmSVelQJnrSe5JFd4OS:+HVM993s7y3Igbltd/S3sPvyBPwUbU5
- MD5 SHA1 SHA512 SSDEEP
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL