Analysis
-
max time kernel
117s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
-
submitted
13-07-2024 08:34
General
-
Target
1513.dll
-
Size
124KB
-
MD5
bb7ca4c37ec7f5290608b445ff9dd4ce
-
SHA1
434bdfc3a8536472b59dcad1e05078731afe026e
-
SHA256
58387a479517d76cbf1980c44103f7d897454b4a5c3050532ee75f06e309c072
-
SHA512
cdb1bfd05857706fed16a8cb58366662b216978054af730dd8e1821b2874f6488abc6cfa3d9d1fb6f0ae79aebb2859009d09b66cc4a64acb1ac25f8f1b1cfc84
-
SSDEEP
1536:zOJbWxzPmuRIJW338ZqaL1j893wxVjxwD8r4siUYqUXzAuqe2J4O4oDDgj2lokff:SExDm9bmmaeYqUX8He7sDUCbfyiWyiG
Score
10/10
Malware Config
Extracted
Family
strela
C2
45.9.74.32
Attributes
-
url_path
/out.php
-
user_agent
Mozilla/4.0 (compatible)
Signatures
-
Detects Strela Stealer payload 1 IoCs
-
Strela stealer
An info stealer targeting mail credentials first seen in late 2022.
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\1513.dll,#11⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
136KB