Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

1687af4fee...0N.dll

windows7-x64

10

1687af4fee...0N.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1687af4fee7b45133ec0200686e48830N.exe

  • Size

    123KB

  • Sample

    240714-y8tnkswcmd

  • MD5

    1687af4fee7b45133ec0200686e48830

  • SHA1

    b1d55749643671a2ac9d6a5d672e1346ebfdb653

  • SHA256

    ad2ad8104a4a0d97e1c73cbe8fe62606c6029a85e9d106fc2fb18002f2ddc1ac

  • SHA512

    3c556d37895d282dca7b386123a5ee21fc77064fc5bdca0d13361b7824dffb1e592fb6ebade6899e0149bdc596c20e2d6adb666701b1c873bd029fd257a2a668

  • SSDEEP

    1536:eRizBOrQhKCys86Gvqw4d9xtglW4KZZdsfc4dNTKAvQBKNED4SuEppqADIbU88Uy:eRwwQz89vkgMsrulBKaC0qAkzddn

Score
10/10
strelastealer

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      1687af4fee7b45133ec0200686e48830N.exe

    • Size

      123KB

    • MD5

      1687af4fee7b45133ec0200686e48830

    • SHA1

      b1d55749643671a2ac9d6a5d672e1346ebfdb653

    • SHA256

      ad2ad8104a4a0d97e1c73cbe8fe62606c6029a85e9d106fc2fb18002f2ddc1ac

    • SHA512

      3c556d37895d282dca7b386123a5ee21fc77064fc5bdca0d13361b7824dffb1e592fb6ebade6899e0149bdc596c20e2d6adb666701b1c873bd029fd257a2a668

    • SSDEEP

      1536:eRizBOrQhKCys86Gvqw4d9xtglW4KZZdsfc4dNTKAvQBKNED4SuEppqADIbU88Uy:eRwwQz89vkgMsrulBKaC0qAkzddn

    Score
    10/10
    strelastealer

    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

      stealerstrela
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.