Overview
overview
10Static
static
32000.dll
windows7-x64
102000.dll
windows10-2004-x64
102001.dll
windows7-x64
102001.dll
windows10-2004-x64
102002.dll
windows7-x64
102002.dll
windows10-2004-x64
102003.dll
windows7-x64
102003.dll
windows10-2004-x64
102004.dll
windows7-x64
102004.dll
windows10-2004-x64
102005.dll
windows7-x64
102005.dll
windows10-2004-x64
102006.dll
windows7-x64
102006.dll
windows10-2004-x64
102007.dll
windows7-x64
102007.dll
windows10-2004-x64
102008.dll
windows7-x64
102008.dll
windows10-2004-x64
102009.dll
windows7-x64
102009.dll
windows10-2004-x64
102010.dll
windows7-x64
102010.dll
windows10-2004-x64
102011.dll
windows7-x64
102011.dll
windows10-2004-x64
102012.dll
windows7-x64
102012.dll
windows10-2004-x64
102013.dll
windows7-x64
102013.dll
windows10-2004-x64
102014.dll
windows7-x64
102014.dll
windows10-2004-x64
102015.dll
windows7-x64
102015.dll
windows10-2004-x64
10Analysis
- max time kernel
148s - max time network
152s - platform
windows10-2004_x64 - resource
win10v2004-20240709-en - resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system - submitted
13/07/2024, 10:16
Static task
static1
Behavioral task
behavioral1
Sample
2000.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2000.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
2001.dll
Resource
win7-20240705-en
Behavioral task
behavioral4
Sample
2001.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
2002.dll
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
2002.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
2003.dll
Resource
win7-20240705-en
Behavioral task
behavioral8
Sample
2003.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
2004.dll
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
2004.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
2005.dll
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
2005.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
2006.dll
Resource
win7-20240705-en
Behavioral task
behavioral14
Sample
2006.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral15
Sample
2007.dll
Resource
win7-20240704-en
Behavioral task
behavioral16
Sample
2007.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral17
Sample
2008.dll
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
2008.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral19
Sample
2009.dll
Resource
win7-20240705-en
Behavioral task
behavioral20
Sample
2009.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral21
Sample
2010.dll
Resource
win7-20240708-en
Behavioral task
behavioral22
Sample
2010.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral23
Sample
2011.dll
Resource
win7-20240704-en
Behavioral task
behavioral24
Sample
2011.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral25
Sample
2012.dll
Resource
win7-20240705-en
Behavioral task
behavioral26
Sample
2012.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral27
Sample
2013.dll
Resource
win7-20240705-en
Behavioral task
behavioral28
Sample
2013.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral29
Sample
2014.dll
Resource
win7-20240705-en
Behavioral task
behavioral30
Sample
2014.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral31
Sample
2015.dll
Resource
win7-20240708-en
General
- Target 2015.dll
- Size 127KB
- Sample240713-ma7a8syfnd
- SHA256 1dd34c20bcddbe95eb842076c3c948ac6142f35e40bfac9d218b77105498b4f4
- MD5 6f0325b4e10ae4fcf973c4d0c5100ac1
- SHA1 4cd329c4c43c66212ea5c716eb4eb7d040a3dfa1
- SHA512 25f378fa217ff849408a96dc281ce0add569c85adb0a94e59183edce678082da98030d09d97b37b704459051b5367e57cb25f6a183f72d1082d0de4da78a3742
- SSDEEP 3072:0V4GLh8X0/pGyOifVW//ElA9l1qAtLhaxf6I7cGoP65R:0VseGifhij48Gf6II6r
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Extracted
-
strela
-
45.9.74.32
-
url_path
/out.php
-
user_agent
Mozilla/4.0 (compatible)
Signatures
- Detects Strela Stealer payload 2 IoCs
resource yara_rule behavioral32/memory/1184-0-0x000001FD8FB90000-0x000001FD8FBB2000-memory.dmp family_strela behavioral32/memory/1184-1-0x000001FD8FB90000-0x000001FD8FBB2000-memory.dmp family_strela