Strela | Strela[.]zip

Sharing

Copy URL Twitter E-mail

General

Target
Strela.zip
Size 370KB
Sample221124-s79eragg91
SHA256 1079dd8ba84a643ff8c2dacaf485948b375971c882411a68671a0cacb7330570
MD5 116aec69a9dc0a41931ff34708899962
SHA1 080410a8df67f19f29095a9f28216fcbadf7430e
SHA512 d8042236c9f5b357d03508084901959baeb0230721218d9fb1730477274d44a10cffb8346e92aded5b59c37834e38964f97f9a6a3c9df9bd5733b4187a3ada94
SSDEEP 6144:mRl4xIyzkx8RGP0veZUPv6/l+gNn4oJi+EgnlfhRakTJ/7gAablw3DdSlcq07:+lok8+0veZ+YNjE6hckix+3BSt07
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Strela

Malware Config

Extracted

Family

Strela

193.106.191.166

Signatures

Strela family
Strela

File Explorer

Strela.zip

.zip 370KB
run.ps1

.ps1 116B
x.dll

.dll 618KB

Strela.zip

SHA256 1079dd8ba84a643ff8c2dacaf485948b375971c882411a68671a0cacb7330570
MD5 116aec69a9dc0a41931ff34708899962
SHA1 080410a8df67f19f29095a9f28216fcbadf7430e
SHA512 d8042236c9f5b357d03508084901959baeb0230721218d9fb1730477274d44a10cffb8346e92aded5b59c37834e38964f97f9a6a3c9df9bd5733b4187a3ada94
SSDEEP 6144:mRl4xIyzkx8RGP0veZUPv6/l+gNn4oJi+EgnlfhRakTJ/7gAablw3DdSlcq07:+lok8+0veZ+YNjE6hckix+3BSt07
MD5 SHA1 SHA512 SSDEEP

x.dll

IMPHASH 5fd3b641214c1baece783f627746ff30
SHA256 8b0d8651e035fcc91c39b3260c871342d1652c97b37c86f07a561828b652e907
MD5 57ec0f7cf124d1ae3b73e643a6ac1dad
SHA1 213c548e0a5e3fefe37bb857f0f6e3230d29675c
SHA512 e6116ace287aa8ece6a70a516dad7026b719431dc7944c25021df85b47b7cb77bcd5098c1fded6b96295a6aaac6471b4be1deffec8991cbbbadcc8f08b693b82
SSDEEP 12288:bjmmcqPiokJeOweuSQRHJEI2dLBFXkH+MBL:bamcDoOweuRRbc3keMBL
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

9172

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrcatA FindFirstFileA GetLastError FindClose FindNextFileA CreateMutexA ReadFile LocalFree lstrcpyA Sleep WideCharToMultiByte lstrlenA lstrcmpA GetFileSize CreateFileA LCMapStringW CloseHandle GetComputerNameA LCMapStringA GetStringTypeW MultiByteToWideChar GetStringTypeA HeapFree HeapAlloc HeapReAlloc GetCurrentThreadId GetCommandLineA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate HeapDestroy VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc GetModuleHandleW GetProcAddress ExitProcess WriteFile GetStdHandle GetModuleFileNameA TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount RtlUnwind LoadLibraryA GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA

user32

wsprintfA

advapi32

RegCloseKey RegEnumValueA RegQueryInfoKeyA RegOpenKeyExA RegEnumKeyExA

shell32

SHGetFolderPathA

crypt32

CryptUnprotectData

shlwapi

PathFileExistsA

wininet

HttpSendRequestA InternetOpenA InternetCloseHandle HttpOpenRequestA InternetConnectA InternetReadFile