Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

2000.dll

windows7-x64

10

2000.dll

windows10-2004-x64

10

2001.dll

windows7-x64

10

2001.dll

windows10-2004-x64

10

2002.dll

windows7-x64

10

2002.dll

windows10-2004-x64

10

2003.dll

windows7-x64

10

2003.dll

windows10-2004-x64

10

2004.dll

windows7-x64

10

2004.dll

windows10-2004-x64

10

2005.dll

windows7-x64

10

2005.dll

windows10-2004-x64

10

2006.dll

windows7-x64

10

2006.dll

windows10-2004-x64

10

2007.dll

windows7-x64

10

2007.dll

windows10-2004-x64

10

2008.dll

windows7-x64

10

2008.dll

windows10-2004-x64

10

2009.dll

windows7-x64

10

2009.dll

windows10-2004-x64

10

2010.dll

windows7-x64

10

2010.dll

windows10-2004-x64

10

2011.dll

windows7-x64

10

2011.dll

windows10-2004-x64

10

2012.dll

windows7-x64

10

2012.dll

windows10-2004-x64

10

2013.dll

windows7-x64

10

2013.dll

windows10-2004-x64

10

2014.dll

windows7-x64

10

2014.dll

windows10-2004-x64

10

2015.dll

windows7-x64

10

2015.dll

windows10-2004-x64

10

Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    13/07/2024, 10:16 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2014.dll

  • Size

    124KB

  • MD5

    d2ae037ffd060ce41b1d95472d117e8b

  • SHA1

    6877dec76bcf7bf032e6d000cf992fee34202343

  • SHA256

    b17b02c0fe97788200ceb716e8acd7a50ee2c1eff49dd5c11296897704363367

  • SHA512

    e4267e512b3a96907f793666fad5f5c8351ab4a066dbc160da0f5f56534006306430fcf771da518e186b480c500180697be5e2564b9a0c05d52d32a6b242a6db

  • SSDEEP

    3072:yXhbE/qRTK7WUSKmQ4P61/bV1GaQ0m8JsNP:yRq7LAQ4PMb7GalNC

Score
10/10
strelastealer

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Signatures

  • Detects Strela Stealer payload 1 IoCs
  • Strela stealer

    An info stealer targeting mail credentials first seen in late 2022.

    stealerstrela

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\2014.dll,#1
    1⤵
      PID:2888

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2888-0-0x0000000001EB0000-0x0000000001ED2000-memory.dmp

      Filesize

      136KB

      Download

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.