Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    5bd02ee47cf106200ec9a9a8ce22eb7c84aed0893ef08762e822a230a8248a6c

  • Size

    125KB

  • Sample

    240715-phpr9szfqp

  • MD5

    ea423e9d7c3a226c90d29e5e7001f3b9

  • SHA1

    cbe3ca30f413843b3c0820a440931c19efe98685

  • SHA256

    5bd02ee47cf106200ec9a9a8ce22eb7c84aed0893ef08762e822a230a8248a6c

  • SHA512

    f513079b72268f99ffa3e5cd67a15ed1710f62c161ef260b66297dd3ee8df234590236688ff32804129685d8b9563e8e2f605f2eaa20949cec68650737c537a4

  • SSDEEP

    3072:hOUYbV2/cl8Fx1cmkFDMpHrHZeyu6auoLLTOGuyZiy:yV2/+7FyTZPToKGusi

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      5bd02ee47cf106200ec9a9a8ce22eb7c84aed0893ef08762e822a230a8248a6c

    • Size

      125KB

    • MD5

      ea423e9d7c3a226c90d29e5e7001f3b9

    • SHA1

      cbe3ca30f413843b3c0820a440931c19efe98685

    • SHA256

      5bd02ee47cf106200ec9a9a8ce22eb7c84aed0893ef08762e822a230a8248a6c

    • SHA512

      f513079b72268f99ffa3e5cd67a15ed1710f62c161ef260b66297dd3ee8df234590236688ff32804129685d8b9563e8e2f605f2eaa20949cec68650737c537a4

    • SSDEEP

      3072:hOUYbV2/cl8Fx1cmkFDMpHrHZeyu6auoLLTOGuyZiy:yV2/+7FyTZPToKGusi

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks