Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
92s -
max time network
94s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
16/07/2024, 06:21
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
803b842aea3bdf3017c4293976d98db0N.dll
Resource
win7-20240705-en
2 signatures
120 seconds
General
-
Target
803b842aea3bdf3017c4293976d98db0N.dll
-
Size
125KB
-
MD5
803b842aea3bdf3017c4293976d98db0
-
SHA1
5d32d1a281d51d6983939fb7cabe7525b2074db2
-
SHA256
5550e7816d28f055f61de06a25542785a862437404d9e4747773a9132c2504d1
-
SHA512
f449ba91c63591c385793504aa493a73971a144b5974210b5837e5505de173bf56e2594ef534ec7d0210292b195ff602f1ae385213a96740fa1409e8914fb0a6
-
SSDEEP
3072:uF5f6zvn2+VgRchFWzWz6Q96XB508Nxpd+UDKVz:uF5yvbSc6Y4tDM
Malware Config
Extracted
Family
strela
C2
45.9.74.32
Attributes
-
url_path
/out.php
-
user_agent
Mozilla/4.0 (compatible)
Signatures
-
Detects Strela Stealer payload 2 IoCs
resource yara_rule behavioral2/memory/1068-0-0x0000020611A80000-0x0000020611AA2000-memory.dmp family_strela behavioral2/memory/1068-1-0x0000020611A80000-0x0000020611AA2000-memory.dmp family_strela