Analysis
-
max time kernel
121s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
13-07-2024 08:34
General
-
Target
1502.dll
-
Size
124KB
-
MD5
e9238a4aa9136c4800c1575f7d620fbc
-
SHA1
7948a42aedf1f5136468d8c4466e21ac0d98ab70
-
SHA256
cd5429c13ed1d6988d9de5393b272e7f84567ce1322fa5acbd7d3ca7739ad840
-
SHA512
1f0cff6185723209c2098337199ef6a3d4535cf76e8d1d7f4622d5c66e0fda7c8098f48493d147ce662ce304d9c7d1fe678fb7c3344cc6fbbdc34e1d71ac77b4
-
SSDEEP
3072:/7hs3QpzcrxIGHGNjo3Q3tJkUw5fhhM7eRLg:dwxIGmNjEhUKfM7eRL
Score
10/10
Malware Config
Extracted
Family
strela
C2
45.9.74.32
Attributes
-
url_path
/out.php
-
user_agent
Mozilla/4.0 (compatible)
Signatures
-
Detects Strela Stealer payload 1 IoCs
-
Strela stealer
An info stealer targeting mail credentials first seen in late 2022.
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\1502.dll,#11⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
136KB