General

  • Target

    9070036232769ef3d265188fff67ea50N.exe

  • Size

    1.9MB

  • MD5

    9070036232769ef3d265188fff67ea50

  • SHA1

    1d1aabe9cc3e2259452e31c8bcaddfbd845fc003

  • SHA256

    061be13ea4ba484514d798f70838648d72f09a5ca6c58a608d9b6d28e63146d1

  • SHA512

    a3397b4f583b2839be791552515c063d3d5505909449ef94370e1e6163a0b1e8d359a8d19273c911b4b49bfc4537737631b7677aa759014723d79df8b2d8ea9f

  • SSDEEP

    49152:8gwH+Hl2+jmaJhsYAH5e6duUPUau0rqURpUpE129j:pF2+/ZAHRu0UwmypUrJ

Score
10/10

Malware Config

Signatures

  • Detects Strela Stealer payload 1 IoCs
  • Strela family
  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • 9070036232769ef3d265188fff67ea50N.exe
    .exe windows:4 windows x86 arch:x86

    7fa974366048f9c551ef45714595665e


    Headers

    Imports

    Sections

  • $0
    .dll windows:5 windows x86 arch:x86

    54a1203b834a3658d206b4bfdb68eb75


    Headers

    Imports

    Exports

    Sections

  • $2
    .exe windows:5 windows x86 arch:x86

    f3d825e2432d022e9373693a98004b28


    Code Sign

    Headers

    Imports

    Sections

  • $3
    .exe windows:5 windows x86 arch:x86

    a9fde5b82d6295006ba4a2831b5cad4a


    Code Sign

    Headers

    Imports

    Sections

  • $COMMONFILES/supportdotcom/rang/driverinst.exe
    .exe windows:5 windows x86 arch:x86

    96bcdb3992dedb6fee0000a67d8b862b


    Code Sign

    Headers

    Imports

    Sections

  • $COMMONFILES/supportdotcom/rang/driverinst64.exe
    .exe windows:5 windows x64 arch:x64

    96bcdb3992dedb6fee0000a67d8b862b


    Code Sign

    Headers

    Imports

    Sections

  • $COMMONFILES/supportdotcom/rang/nt_amd64/ssmirrdr.dll
    .dll windows:6 windows x64 arch:x64

    9535822323dc9440ba9b40cf9f71dd74


    Code Sign

    Headers

    Imports

    Sections

  • $COMMONFILES/supportdotcom/rang/nt_amd64/ssmirrdr.sys
    .sys windows:6 windows x64 arch:x64

    8201f3349e7fca04a64640d8bac5a3a6


    Code Sign

    Headers

    Imports

    Sections

  • $COMMONFILES/supportdotcom/rang/nt_x86/ssmirrdr.dll
    .dll windows:6 windows x86 arch:x86

    2c31acb0b376130ca2719a3f93993560


    Code Sign

    Headers

    Imports

    Sections

  • $COMMONFILES/supportdotcom/rang/nt_x86/ssmirrdr.sys
    .sys windows:6 windows x86 arch:x86

    518167d6aeefde1975592d28cbae7110


    Code Sign

    Headers

    Imports

    Sections

  • $COMMONFILES/supportdotcom/rang/ssmirrdr-nt_amd64.cat
  • $COMMONFILES/supportdotcom/rang/ssmirrdr-nt_x86.cat
  • $COMMONFILES/supportdotcom/rang/ssmirrdr.inf
  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    2017f2acbdaa42ab3e4adeb8b4c37e7b


    Headers

    Imports

    Exports

    Sections

  • $PROGRAMFILES/supportdotcom/rang/uninst.exe.nsis
  • ca-bundle.crt
  • ssranghk.dll
    .dll windows:5 windows x86 arch:x86

    c2377f538bc52f5952f778901a3684bc


    Headers

    Imports

    Exports

    Sections

  • support.ico