Analysis
-
max time kernel
144s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
13-07-2024 08:34
General
-
Target
1501.dll
-
Size
124KB
-
MD5
1c5cb070b69fe5ce64502d172beddf0f
-
SHA1
a008d550fe03896871d612a0d544170aaa365db0
-
SHA256
5fba54c252074a7687a9a0fdff2d72acc60d3375562b1ef29e5fa561f8063a35
-
SHA512
c6137b06a92b4561c758fc09fb73687642294a505748932adb77e98f884fe1215508ca67b0dcb09e7047bc7c2043fe30fcb4fbfb002e1800131f8cf987b19bb7
-
SSDEEP
1536:ClD20jpcFPAPbcISEKlJWmAndT54c0+aC4RMIUN4E6z7xBC8WzINoDyHnOLYmO5C:ClD2b4joNWjn/TSr8D6z7xBCmNfF5
Score
10/10
Malware Config
Extracted
Family
strela
C2
45.9.74.32
Attributes
-
url_path
/out.php
-
user_agent
Mozilla/4.0 (compatible)
Signatures
-
Detects Strela Stealer payload 2 IoCs
-
Strela stealer
An info stealer targeting mail credentials first seen in late 2022.
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\1501.dll,#11⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
136KB
-
Filesize
136KB