Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
92s -
max time network
94s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
15/07/2024, 12:05
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
bf08cb8946d1e68791c527fbbe5986fee7d94282857b635ae49c470af3c5eca7.dll
Resource
win10v2004-20240709-en
2 signatures
150 seconds
General
-
Target
bf08cb8946d1e68791c527fbbe5986fee7d94282857b635ae49c470af3c5eca7.dll
-
Size
128KB
-
MD5
5d93e05d4d8f3b3f5107b42c1025e3ac
-
SHA1
c743ca42e1b2ae07973c548212b6dbfd99aafdb2
-
SHA256
bf08cb8946d1e68791c527fbbe5986fee7d94282857b635ae49c470af3c5eca7
-
SHA512
93c83795cd8aecf8252a7dd50aa119fb6b5dea4d942ddfe727c023430d9f2036c74ea35ca3e77b89ba32e1e232d22295a7c07c19bfc45329fc6ae6c2b177ca3b
-
SSDEEP
1536:pqjIyXCf7tYe8r/4prk59JG4+3uE/jCQR/frtGX0sN2on3a3tO0yU95a:wcOChYP/4lk595+ttGX0s0o0Ei
Malware Config
Extracted
Family
strela
C2
45.9.74.32
Attributes
-
url_path
/out.php
-
user_agent
Mozilla/4.0 (compatible)
Signatures
-
Detects Strela Stealer payload 2 IoCs
resource yara_rule behavioral1/memory/5008-0-0x000001D727B00000-0x000001D727B22000-memory.dmp family_strela behavioral1/memory/5008-1-0x000001D727B00000-0x000001D727B22000-memory.dmp family_strela