strela | 5c8b35a836b8c19fb65ab26622c51c03e8c4e7a3dd18bb24427ad2eaaa2f765b

Analysis

max time kernel
91s
max time network
97s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
13/07/2024, 10:16

Target
2014.dll
Size 124KB
Sample240713-ma7a8syfnd
SHA256 b17b02c0fe97788200ceb716e8acd7a50ee2c1eff49dd5c11296897704363367
MD5 d2ae037ffd060ce41b1d95472d117e8b
SHA1 6877dec76bcf7bf032e6d000cf992fee34202343
SHA512 e4267e512b3a96907f793666fad5f5c8351ab4a066dbc160da0f5f56534006306430fcf771da518e186b480c500180697be5e2564b9a0c05d52d32a6b242a6db
SSDEEP 3072:yXhbE/qRTK7WUSKmQ4P61/bV1GaQ0m8JsNP:yRq7LAQ4PMb7GalNC
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

strela stealer

Family

Attributes

Detects Strela Stealer payload 1 IoCs

resource	yara_rule
behavioral30/memory/3716-0-0x000001594E990000-0x000001594E9B2000-memory.dmp	family_strela

Strela stealer
An info stealer targeting mail credentials first seen in late 2022.
stealer strela

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2014.dll,#1
1⤵
PID:3716

memory/3716-0-0x000001594E990000-0x000001594E9B2000-memory.dmp

Download