Overview
overview
10Static
static
32000.dll
windows7-x64
102000.dll
windows10-2004-x64
102001.dll
windows7-x64
102001.dll
windows10-2004-x64
102002.dll
windows7-x64
102002.dll
windows10-2004-x64
102003.dll
windows7-x64
102003.dll
windows10-2004-x64
102004.dll
windows7-x64
102004.dll
windows10-2004-x64
102005.dll
windows7-x64
102005.dll
windows10-2004-x64
102006.dll
windows7-x64
102006.dll
windows10-2004-x64
102007.dll
windows7-x64
102007.dll
windows10-2004-x64
102008.dll
windows7-x64
102008.dll
windows10-2004-x64
102009.dll
windows7-x64
102009.dll
windows10-2004-x64
102010.dll
windows7-x64
102010.dll
windows10-2004-x64
102011.dll
windows7-x64
102011.dll
windows10-2004-x64
102012.dll
windows7-x64
102012.dll
windows10-2004-x64
102013.dll
windows7-x64
102013.dll
windows10-2004-x64
102014.dll
windows7-x64
102014.dll
windows10-2004-x64
102015.dll
windows7-x64
102015.dll
windows10-2004-x64
10Analysis
-
max time kernel
91s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
13-07-2024 10:16
Static task
static1
Behavioral task
behavioral1
Sample
2000.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2000.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
2001.dll
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
2001.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
2002.dll
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
2002.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
2003.dll
Resource
win7-20240705-en
Behavioral task
behavioral8
Sample
2003.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
2004.dll
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
2004.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
2005.dll
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
2005.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
2006.dll
Resource
win7-20240705-en
Behavioral task
behavioral14
Sample
2006.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral15
Sample
2007.dll
Resource
win7-20240704-en
Behavioral task
behavioral16
Sample
2007.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral17
Sample
2008.dll
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
2008.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral19
Sample
2009.dll
Resource
win7-20240705-en
Behavioral task
behavioral20
Sample
2009.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral21
Sample
2010.dll
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
2010.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral23
Sample
2011.dll
Resource
win7-20240704-en
Behavioral task
behavioral24
Sample
2011.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral25
Sample
2012.dll
Resource
win7-20240705-en
Behavioral task
behavioral26
Sample
2012.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral27
Sample
2013.dll
Resource
win7-20240705-en
Behavioral task
behavioral28
Sample
2013.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral29
Sample
2014.dll
Resource
win7-20240705-en
Behavioral task
behavioral30
Sample
2014.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral31
Sample
2015.dll
Resource
win7-20240708-en
General
-
Target
2009.dll
-
Size
124KB
-
MD5
7cfc769cae03af48d4271634d7dc3888
-
SHA1
638616772b711aeab2e016d2ec8aacf9f7254d33
-
SHA256
6ddbace5f3f349b7383f7f0d6563f95683089873f07288262dc5f574299fe77f
-
SHA512
3a238f90f4040427ac7ee6c73e7aad87f858b5f35ad29a5adec133f1de4ed74d82071ce4c472d09cc2adf17c5294ede97b4e84026026d0b3210f4f46a116a893
-
SSDEEP
3072:exUvrFOXflruYtIQ13NcnvbCMxST0g9JK2ez7i:/vrFOvVLIt2KFi
Malware Config
Extracted
strela
45.9.74.32
-
url_path
/out.php
-
user_agent
Mozilla/4.0 (compatible)
Signatures
-
Detects Strela Stealer payload 2 IoCs
resource yara_rule behavioral20/memory/3000-0-0x0000020755910000-0x0000020755932000-memory.dmp family_strela behavioral20/memory/3000-1-0x0000020755910000-0x0000020755932000-memory.dmp family_strela