General
- Target I262231109.js
- Size 4.2MB
- Sample240108-2gp3vsdggk
- SHA256 a604d0cf8041c9e156f74c90d4abf53f28b695ab03d6b5dfb034a6c833fced1b
- MD5 f775c9021104377f50b35c575b9297a8
- SHA1 bcc02efb0ef345677c161030d2bbb6d7a6b0f118
- SHA512 1879ccba16e67c89c735b67249999afee25407262ff4d3f96240a45e8401ef09b1fef71a450331fa808ab5b1f9007d1f0bec2fc810897c5788ccd5e64216a1eb
- SSDEEP 24576:iBL/aX6WpQlCuQSAFLrjHTExzK6fEGBRRQs1IJVK1HafYbqxkcdRGb4OOvGSe0OU:lhPYUt5N0XWjV+fm6OXYUbU0
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
I262231109.js
Resource
win7-20231215-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
strela
C2
-
193.109.85.77
Targets
-
- Target I262231109.js
- Size 4.2MB
- SHA256 a604d0cf8041c9e156f74c90d4abf53f28b695ab03d6b5dfb034a6c833fced1b
- MD5 f775c9021104377f50b35c575b9297a8
- SHA1 bcc02efb0ef345677c161030d2bbb6d7a6b0f118
- SHA512 1879ccba16e67c89c735b67249999afee25407262ff4d3f96240a45e8401ef09b1fef71a450331fa808ab5b1f9007d1f0bec2fc810897c5788ccd5e64216a1eb
- SSDEEP 24576:iBL/aX6WpQlCuQSAFLrjHTExzK6fEGBRRQs1IJVK1HafYbqxkcdRGb4OOvGSe0OU:lhPYUt5N0XWjV+fm6OXYUbU0
- MD5 SHA1 SHA512 SSDEEP
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL