Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

202febe577...0N.dll

windows7-x64

10

202febe577...0N.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    202febe577cc3f38e4edb00367edfeb0N.exe

  • Size

    280KB

  • Sample

    240715-2kagkssgll

  • MD5

    202febe577cc3f38e4edb00367edfeb0

  • SHA1

    8cc4532db11ee5083ddb90354b2591aa4c283fbb

  • SHA256

    9083539da0cb9d9501558da5b5b66a7c5a935264fb3717220fdbcf26adb0b6e3

  • SHA512

    23d5d50d7e15ea822e8e1f0f03a65de7bb27b80dbdce71dc5d1dcecb9dd567ba67ca9b31a0a96337d51b423cde373882871c6c338bf6eb03ab11286e7d6a5b9a

  • SSDEEP

    6144:2grnHIJUCzuEh5xyJYgelEbUFdeFThQHaqBb03UB:2g2juHJYgYndeU6qpB

Score
10/10
strelastealer

Malware Config

Extracted

Family

strela

C2

45.9.74.176

Attributes
  • url_path

    /server.php

  • user_agent

    Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537

Targets

    • Target

      202febe577cc3f38e4edb00367edfeb0N.exe

    • Size

      280KB

    • MD5

      202febe577cc3f38e4edb00367edfeb0

    • SHA1

      8cc4532db11ee5083ddb90354b2591aa4c283fbb

    • SHA256

      9083539da0cb9d9501558da5b5b66a7c5a935264fb3717220fdbcf26adb0b6e3

    • SHA512

      23d5d50d7e15ea822e8e1f0f03a65de7bb27b80dbdce71dc5d1dcecb9dd567ba67ca9b31a0a96337d51b423cde373882871c6c338bf6eb03ab11286e7d6a5b9a

    • SSDEEP

      6144:2grnHIJUCzuEh5xyJYgelEbUFdeFThQHaqBb03UB:2g2juHJYgYndeU6qpB

    Score
    10/10
    strelastealer

    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

      stealerstrela
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.