Overview
overview
10Static
static
32000.dll
windows7-x64
102000.dll
windows10-2004-x64
102001.dll
windows7-x64
102001.dll
windows10-2004-x64
102002.dll
windows7-x64
102002.dll
windows10-2004-x64
102003.dll
windows7-x64
102003.dll
windows10-2004-x64
102004.dll
windows7-x64
102004.dll
windows10-2004-x64
102005.dll
windows7-x64
102005.dll
windows10-2004-x64
102006.dll
windows7-x64
102006.dll
windows10-2004-x64
102007.dll
windows7-x64
102007.dll
windows10-2004-x64
102008.dll
windows7-x64
102008.dll
windows10-2004-x64
102009.dll
windows7-x64
102009.dll
windows10-2004-x64
102010.dll
windows7-x64
102010.dll
windows10-2004-x64
102011.dll
windows7-x64
102011.dll
windows10-2004-x64
102012.dll
windows7-x64
102012.dll
windows10-2004-x64
102013.dll
windows7-x64
102013.dll
windows10-2004-x64
102014.dll
windows7-x64
102014.dll
windows10-2004-x64
102015.dll
windows7-x64
102015.dll
windows10-2004-x64
10Analysis
-
max time kernel
148s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
13-07-2024 10:16
Static task
static1
Behavioral task
behavioral1
Sample
2000.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2000.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
2001.dll
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
2001.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
2002.dll
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
2002.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
2003.dll
Resource
win7-20240705-en
Behavioral task
behavioral8
Sample
2003.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
2004.dll
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
2004.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
2005.dll
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
2005.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
2006.dll
Resource
win7-20240705-en
Behavioral task
behavioral14
Sample
2006.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral15
Sample
2007.dll
Resource
win7-20240704-en
Behavioral task
behavioral16
Sample
2007.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral17
Sample
2008.dll
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
2008.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral19
Sample
2009.dll
Resource
win7-20240705-en
Behavioral task
behavioral20
Sample
2009.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral21
Sample
2010.dll
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
2010.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral23
Sample
2011.dll
Resource
win7-20240704-en
Behavioral task
behavioral24
Sample
2011.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral25
Sample
2012.dll
Resource
win7-20240705-en
Behavioral task
behavioral26
Sample
2012.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral27
Sample
2013.dll
Resource
win7-20240705-en
Behavioral task
behavioral28
Sample
2013.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral29
Sample
2014.dll
Resource
win7-20240705-en
Behavioral task
behavioral30
Sample
2014.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral31
Sample
2015.dll
Resource
win7-20240708-en
General
-
Target
2015.dll
-
Size
127KB
-
MD5
6f0325b4e10ae4fcf973c4d0c5100ac1
-
SHA1
4cd329c4c43c66212ea5c716eb4eb7d040a3dfa1
-
SHA256
1dd34c20bcddbe95eb842076c3c948ac6142f35e40bfac9d218b77105498b4f4
-
SHA512
25f378fa217ff849408a96dc281ce0add569c85adb0a94e59183edce678082da98030d09d97b37b704459051b5367e57cb25f6a183f72d1082d0de4da78a3742
-
SSDEEP
3072:0V4GLh8X0/pGyOifVW//ElA9l1qAtLhaxf6I7cGoP65R:0VseGifhij48Gf6II6r
Malware Config
Extracted
strela
45.9.74.32
-
url_path
/out.php
-
user_agent
Mozilla/4.0 (compatible)
Signatures
-
Detects Strela Stealer payload 2 IoCs
resource yara_rule behavioral32/memory/1184-0-0x000001FD8FB90000-0x000001FD8FBB2000-memory.dmp family_strela behavioral32/memory/1184-1-0x000001FD8FB90000-0x000001FD8FBB2000-memory.dmp family_strela