strela | 9b87b62391f32ae8191d3cc4ae27a66acad2394f5dc37ce4ccd8acfcd06e6e0a | Triage

Analysis

max time kernel
117s
max time network
124s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
13-07-2024 11:21

Sharing

Report Analysis Logs

General

Target

2506.dll
Size

123KB
MD5

1e12d0094de5fde87b49c3ef4426ea17
SHA1

15b01f6d79276677027f587fdc5437121bb4faa0
SHA256

d7db3d8a5c676e98bc41242c884dd4ca4bdf586d52e2e74a0801a242eb14279d
SHA512

75fad41b74be3a7c5917aabdac6147e9d8e4261adce666902c9d57d8b2fa3576bf8a874f084a78a69d302719926b1d2fb134ce574cc6aaaf4f4861cd71345fe9
SSDEEP

3072:4bbDvni7zks6eYPEhg6TD70h9Z+na09Z9PGe7xvCAOlgLLZf:4bbe7P6es6TDQ09fjxUlgR

Score

10^/10

strela stealer

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes

url_path
/out.php
user_agent
Mozilla/4.0 (compatible)

Signatures

Detects Strela Stealer payload 1 IoCs

resource	yara_rule
behavioral13/memory/1596-0-0x00000000004B0000-0x00000000004D2000-memory.dmp	family_strela

Strela stealer
An info stealer targeting mail credentials first seen in late 2022.
stealer strela

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\2506.dll,#1
1⤵
PID:1596

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1596-0-0x00000000004B0000-0x00000000004D2000-memory.dmp

Filesize
136KB

Download