Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    018ce1da1cf93f11aa901a39711490d250ddfc8dbd572a57d534ad9edcd77256

  • Size

    123KB

  • Sample

    240715-n8nr8azcrg

  • MD5

    55be298e38c507a14bd0114232c02c3b

  • SHA1

    7c2bc9bd625f3d577c7d157f532e7e0d6130534d

  • SHA256

    018ce1da1cf93f11aa901a39711490d250ddfc8dbd572a57d534ad9edcd77256

  • SHA512

    e36a1de82a3b45973485583299f97319e1f2a5cf1797791d4abd7a011a1536f91f2cb9a0b8113b933500cd1d8860d65b566267795fcc58f95130f6f63fde71e6

  • SSDEEP

    3072:poVIV8OfSnAdcDGIVFVdQsMzcOS+28Qf6hZwwr9kPEkpYXHIJtR9:jXuDGmBQFj9Q+ZnkskpYoJtf

Score
10/10
strelastealer

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      018ce1da1cf93f11aa901a39711490d250ddfc8dbd572a57d534ad9edcd77256

    • Size

      123KB

    • MD5

      55be298e38c507a14bd0114232c02c3b

    • SHA1

      7c2bc9bd625f3d577c7d157f532e7e0d6130534d

    • SHA256

      018ce1da1cf93f11aa901a39711490d250ddfc8dbd572a57d534ad9edcd77256

    • SHA512

      e36a1de82a3b45973485583299f97319e1f2a5cf1797791d4abd7a011a1536f91f2cb9a0b8113b933500cd1d8860d65b566267795fcc58f95130f6f63fde71e6

    • SSDEEP

      3072:poVIV8OfSnAdcDGIVFVdQsMzcOS+28Qf6hZwwr9kPEkpYXHIJtR9:jXuDGmBQFj9Q+ZnkskpYoJtf

    Score
    10/10
    strelastealer

    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

      stealerstrela
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.