Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    daa42b972f8bd83f61e85a9b17c40c9b6b4ee2e84dfa32cd6af717abd89626c3

  • Size

    124KB

  • Sample

    240715-pgkrxszdrp

  • MD5

    9241b29360a8142887b5ab0f28d8560a

  • SHA1

    16d7345f957b108c37f355c4d8e152b9f5dd80c4

  • SHA256

    daa42b972f8bd83f61e85a9b17c40c9b6b4ee2e84dfa32cd6af717abd89626c3

  • SHA512

    078792faaa37ee9611730cbd13882354a7a0c4b009e7813bc028380a631bfdb5146fcf78f624c0be10da31872f4263155096c45c736005c90a75db751033ba78

  • SSDEEP

    3072:Ti4ElZBvDb6OeEyUcEjeyE86glpr1k4GbJbRKDi72xP54:+44vLmOFy3wer8661kxlGPy

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      daa42b972f8bd83f61e85a9b17c40c9b6b4ee2e84dfa32cd6af717abd89626c3

    • Size

      124KB

    • MD5

      9241b29360a8142887b5ab0f28d8560a

    • SHA1

      16d7345f957b108c37f355c4d8e152b9f5dd80c4

    • SHA256

      daa42b972f8bd83f61e85a9b17c40c9b6b4ee2e84dfa32cd6af717abd89626c3

    • SHA512

      078792faaa37ee9611730cbd13882354a7a0c4b009e7813bc028380a631bfdb5146fcf78f624c0be10da31872f4263155096c45c736005c90a75db751033ba78

    • SSDEEP

      3072:Ti4ElZBvDb6OeEyUcEjeyE86glpr1k4GbJbRKDi72xP54:+44vLmOFy3wer8661kxlGPy

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks