Analysis

  • max time kernel
    143s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230703-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23/07/2023, 01:52

General

  • Target

    0ab2b87d8f6e4931d9ffadd9d61e3a5c62b121687e3a8ca9a9b248360bbeaad8.dll

  • Size

    820KB

  • MD5

    88fc768f1e1c86650a267c4c54c14607

  • SHA1

    627be98bb24119e11572d0746b31be03b72d1bff

  • SHA256

    0ab2b87d8f6e4931d9ffadd9d61e3a5c62b121687e3a8ca9a9b248360bbeaad8

  • SHA512

    78c896fcbb47ef84aab62a565ef0d147e68df6d0e3fccceb391d7770167dc51cbcb79ec097e546b740a64d552ba5697cc1ea2c8d5d3abe9b4a5f4ac81312ceee

  • SSDEEP

    6144:cikeb2mCfqVrVvb1In5dG39xvdOoCTbi7PQAD2Kf30KPmw1FKGb95TKhh:cikVmpVvbD+oCTbic82KMKuObKH

Score
10/10

Malware Config

Extracted

Family

strela

C2

91.215.85.209

Signatures

  • Strela

    An info stealer targeting mail credentials first seen in late 2022.

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\0ab2b87d8f6e4931d9ffadd9d61e3a5c62b121687e3a8ca9a9b248360bbeaad8.dll,#1
    1⤵
      PID:4480

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4480-133-0x000002718FB00000-0x000002718FB21000-memory.dmp

      Filesize

      132KB

    • memory/4480-134-0x000000006D7C0000-0x000000006D895000-memory.dmp

      Filesize

      852KB

    • memory/4480-135-0x000002718FB00000-0x000002718FB21000-memory.dmp

      Filesize

      132KB