strela | 45b0fa38912e499292f27b196e6305b98da664c186155c20a257d3221f13a7b1

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
09-07-2024 16:19

Target

45b0fa38912e499292f27b196e6305b98da664c186155c20a257d3221f13a7b1.dll
Size

155KB
MD5

aa5bb601c4836a935fa9b5483b6d0ee0
SHA1

e92aa850c086feaa5a5c7a9495cb024ed2e5682f
SHA256

45b0fa38912e499292f27b196e6305b98da664c186155c20a257d3221f13a7b1
SHA512

65e0225817d08f76369b3330ece93c70ecef3403bc10df4824217c7980131d7f0a697bb8b7249d237aa14eab87787821e61c7a504b9a115fed31df61bc7aca59
SSDEEP

3072:3DUOUvBqho3ihE15S0iVrw/x06AMu8w7GrlOgpcI0crg:3DUOUpP3yE100OrWFAp8wy6I0V

Score

10^/10

strela stealer

Family

strela

45.9.74.13

Attributes

url_path
/server.php
user_agent
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537

Detects Strela Stealer payload 2 IoCs

resource	yara_rule
behavioral1/memory/1088-0-0x000007FEFAB00000-0x000007FEFAB30000-memory.dmp	family_strela
behavioral1/memory/1088-1-0x00000000002A0000-0x00000000002C2000-memory.dmp	family_strela

Strela stealer
An info stealer targeting mail credentials first seen in late 2022.
stealer strela

C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\45b0fa38912e499292f27b196e6305b98da664c186155c20a257d3221f13a7b1.dll
1⤵
PID:1088

memory/1088-0-0x000007FEFAB00000-0x000007FEFAB30000-memory.dmp

Filesize
192KB

Download
memory/1088-1-0x00000000002A0000-0x00000000002C2000-memory.dmp

Filesize
136KB

Download