strela | 5c8b35a836b8c19fb65ab26622c51c03e8c4e7a3dd18bb24427ad2eaaa2f765b

Analysis

max time kernel
146s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
13/07/2024, 10:16

Target
2001.dll
Size 124KB
Sample240713-ma7a8syfnd
SHA256 b07c47094623fafcd9747b39dc40eef44d61b668f2849645481ef9088db69550
MD5 91f67ccca5fd36cc883698adf1476464
SHA1 12d7b345c1dc3599a6a5c74f93e3de6a31a79f90
SHA512 e606078e83359f88faea25e41b8cfd7b25cfe10f921b37f99d71ad4087cd27deedc3a0453bff5f96b6e537c5eb57daf29d788afa628c7a806a1c82945f726c37
SSDEEP 3072:13u2hIcgdtA/Q7XTiT4kinWDTTggnH8yRF/4u0DbjQHHMM:13zhIcEtN7X0DTzncOytZM
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

strela stealer

Family

Attributes

Detects Strela Stealer payload 1 IoCs

resource	yara_rule
behavioral4/memory/5032-0-0x000001FA9F770000-0x000001FA9F792000-memory.dmp	family_strela

Strela stealer
An info stealer targeting mail credentials first seen in late 2022.
stealer strela

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2001.dll,#1
1⤵
PID:5032