General
- Target 3.js
- Size 4.2MB
- Sample240109-n6weaaheep
- SHA256 a604d0cf8041c9e156f74c90d4abf53f28b695ab03d6b5dfb034a6c833fced1b
- MD5 f775c9021104377f50b35c575b9297a8
- SHA1 bcc02efb0ef345677c161030d2bbb6d7a6b0f118
- SHA512 1879ccba16e67c89c735b67249999afee25407262ff4d3f96240a45e8401ef09b1fef71a450331fa808ab5b1f9007d1f0bec2fc810897c5788ccd5e64216a1eb
- SSDEEP 24576:iBL/aX6WpQlCuQSAFLrjHTExzK6fEGBRRQs1IJVK1HafYbqxkcdRGb4OOvGSe0OU:lhPYUt5N0XWjV+fm6OXYUbU0
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
3.js
Resource
win7-20231129-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
strela
C2
-
193.109.85.77
Targets
-
- Target 3.js
- Size 4.2MB
- SHA256 a604d0cf8041c9e156f74c90d4abf53f28b695ab03d6b5dfb034a6c833fced1b
- MD5 f775c9021104377f50b35c575b9297a8
- SHA1 bcc02efb0ef345677c161030d2bbb6d7a6b0f118
- SHA512 1879ccba16e67c89c735b67249999afee25407262ff4d3f96240a45e8401ef09b1fef71a450331fa808ab5b1f9007d1f0bec2fc810897c5788ccd5e64216a1eb
- SSDEEP 24576:iBL/aX6WpQlCuQSAFLrjHTExzK6fEGBRRQs1IJVK1HafYbqxkcdRGb4OOvGSe0OU:lhPYUt5N0XWjV+fm6OXYUbU0
- MD5 SHA1 SHA512 SSDEEP
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Loads dropped DLL