strela | bfe7803857dcf6a2b8eef074d0205dd365e9bdab322fc4c5ffdefe7d81b999a9

Analysis

max time kernel
145s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
12/07/2024, 13:31

Target
4515.dll
Size 122KB
Sample240712-qsdcnavgrp
SHA256 4839fef165a25d3dbd917eb276cde70ed3628ecca078de89497d76c72b7d116e
MD5 6922b40165284d482e155394577f1e6d
SHA1 ef870d98916f1a0899bfea4cd62a5b1fdb0675a1
SHA512 bb88b270d1497397434edc13f3de10239f5cccdd196c816e5c9990804e1af89e9dc3afd8e1f027e720f4475405f154ee96bbcaf7862ba37d56c08e69141ffaec
SSDEEP 3072:Wyeu7qKPJI6+d/287ewvi2skYC7u+ajzm:GH96+Z2879vi2c+aj
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

strela stealer

Family

Attributes

Detects Strela Stealer payload 1 IoCs

resource	yara_rule
behavioral32/memory/1204-0-0x000001BD43D20000-0x000001BD43D42000-memory.dmp	family_strela

Strela stealer
An info stealer targeting mail credentials first seen in late 2022.
stealer strela

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\4515.dll,#1
1⤵
PID:1204