Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
15/07/2024, 11:59
Static task
static1
Behavioral task
behavioral1
Sample
dfa664e2a90c8aa9197093edee0f3ee03d2a2ea89e655f4064678b351aae617b.dll
Resource
win10v2004-20240709-en
General
-
Target
dfa664e2a90c8aa9197093edee0f3ee03d2a2ea89e655f4064678b351aae617b.dll
-
Size
124KB
-
MD5
4b5bb1d43f9af502a19d49074e1a5f5e
-
SHA1
a18621d7ea610da81abb5d0e69337765e55e0129
-
SHA256
dfa664e2a90c8aa9197093edee0f3ee03d2a2ea89e655f4064678b351aae617b
-
SHA512
226910a9c8c13ea05a328cb27d70cf7f977f48f32a999b2d7b764ce51ba7cc6c39a6ef8870b6a01f0346eb0f541ad5cae71b9215f0c73c9167196a42db239699
-
SSDEEP
1536:bz14jmvQqJHSmkGPcVX+U1r7lqex9aRSuoLpK4zRgbFPm6zwsQw0rgKPe0eXfMae:bKjmv3xEX+U1rBq4a0fpJziM4wsQpm
Malware Config
Extracted
strela
45.9.74.32
-
url_path
/out.php
-
user_agent
Mozilla/4.0 (compatible)
Signatures
-
Detects Strela Stealer payload 2 IoCs
resource yara_rule behavioral1/memory/2736-0-0x000001B95F290000-0x000001B95F2B2000-memory.dmp family_strela behavioral1/memory/2736-1-0x000001B95F290000-0x000001B95F2B2000-memory.dmp family_strela