Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
14/07/2024, 12:39
Static task
static1
Behavioral task
behavioral1
Sample
0135682cf18fd685e28fc046fcae8500N.dll
Resource
win7-20240704-en
General
-
Target
0135682cf18fd685e28fc046fcae8500N.dll
-
Size
213KB
-
MD5
0135682cf18fd685e28fc046fcae8500
-
SHA1
2d45a44b8c2b56d9e86cc7c952a6c5ab55139b29
-
SHA256
86879c96df0e208c0ce116477324d485b24d1590485d5bc1fbe94c88c6857b67
-
SHA512
eaadbaf9b49d1e1125cbf36df092490e2c0c0da313e65b1bd59985e5e36c513e6fcda3b0497e861dacc111458ca5d9b80f59a895b4bda8a797075914912ed787
-
SSDEEP
3072:RK6mzHyYiB7NHFM6weLG1jSJdwfyY0dhA3RI4RsFRI+CiszAUB:Rmmjn95a0JdaZLBI4qRI0UB
Malware Config
Extracted
strela
45.9.74.176
-
url_path
/server.php
-
user_agent
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537
Signatures
-
Detects Strela Stealer payload 2 IoCs
resource yara_rule behavioral1/memory/1740-0-0x000007FEF6950000-0x000007FEF698D000-memory.dmp family_strela behavioral1/memory/1740-1-0x0000000001D90000-0x0000000001DB2000-memory.dmp family_strela