strela | bd75fe8c744f1276f42229065c281463a34ae29b4c4afe9b1045a263a11c4103 | Triage

Resubmissions

13-07-2024 11:14

240713-ncevfazhpa 10

13-07-2024 10:54

240713-mzz88axhkm 3

Analysis

max time kernel
119s
max time network
139s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
13-07-2024 11:14

Sharing

Report Analysis Logs

General

Target

984.dll
Size

124KB
MD5

61f5c6297292b05b74d20abe5736bd0f
SHA1

576a7055bb08e75f61d2707bcd8dd9f716c5eee6
SHA256

95abde1107b4d8e65089a736dceadbab7c40ecee8c680dea6d6afa2a584607a2
SHA512

824a3dc882e371e1f5a04f84ded66a72197da75f6b7b7a55fac0762b416c4e4640bdb48695e3cfcdb74287df57ec29ad1696dd7590a4ef33289140a5cdaa2b87
SSDEEP

3072:8+BFlwf4ZBEqSUwwqw50Nec8fApk9I/cC+VI:80KfiWxfz84+IEC+VI

Score

10^/10

strela stealer

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes

url_path
/out.php
user_agent
Mozilla/4.0 (compatible)

Signatures

Detects Strela Stealer payload 1 IoCs

resource	yara_rule
behavioral31/memory/2392-0-0x0000000001D50000-0x0000000001D72000-memory.dmp	family_strela

Strela stealer
An info stealer targeting mail credentials first seen in late 2022.
stealer strela

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\984.dll,#1
1⤵
PID:2392

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2392-0-0x0000000001D50000-0x0000000001D72000-memory.dmp

Filesize
136KB

Download