Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
94s -
max time network
96s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
14/07/2024, 12:39
Static task
static1
Behavioral task
behavioral1
Sample
0135682cf18fd685e28fc046fcae8500N.dll
Resource
win7-20240704-en
General
-
Target
0135682cf18fd685e28fc046fcae8500N.dll
-
Size
213KB
-
MD5
0135682cf18fd685e28fc046fcae8500
-
SHA1
2d45a44b8c2b56d9e86cc7c952a6c5ab55139b29
-
SHA256
86879c96df0e208c0ce116477324d485b24d1590485d5bc1fbe94c88c6857b67
-
SHA512
eaadbaf9b49d1e1125cbf36df092490e2c0c0da313e65b1bd59985e5e36c513e6fcda3b0497e861dacc111458ca5d9b80f59a895b4bda8a797075914912ed787
-
SSDEEP
3072:RK6mzHyYiB7NHFM6weLG1jSJdwfyY0dhA3RI4RsFRI+CiszAUB:Rmmjn95a0JdaZLBI4qRI0UB
Malware Config
Extracted
strela
45.9.74.176
-
url_path
/server.php
-
user_agent
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537
Signatures
-
Detects Strela Stealer payload 2 IoCs
resource yara_rule behavioral2/memory/4396-0-0x00007FFD63960000-0x00007FFD6399D000-memory.dmp family_strela behavioral2/memory/4396-1-0x0000000002570000-0x0000000002592000-memory.dmp family_strela