Analysis
-
max time kernel
147s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
13-07-2024 11:43
General
-
Target
503.dll
-
Size
123KB
-
MD5
66309f5bf3835cf657adb8c4950333d1
-
SHA1
f69692bf2f6fe8dfa98b69fadafb07a1a231ec4f
-
SHA256
e3bf10b27276e981ebba89ccdca990f61ab78e89586288bd81d2fa5593ae92b6
-
SHA512
93049b15b4c2fdb1b32ad3686beb5f5ddf7c623c00d9abeeea41e9385ac742afa4170c6f97acd7a765bbd808496ce5cd23de2c357156eff3a911a95ca97eb675
-
SSDEEP
3072:GDtRjuiDF1NGUKFIxgB31tsz99Vopnj2UFgdya:mHlPNNKFiEsz9fop6UFgEa
Score
10/10
Malware Config
Extracted
Family
strela
C2
45.9.74.32
Attributes
-
url_path
/out.php
-
user_agent
Mozilla/4.0 (compatible)
Signatures
-
Detects Strela Stealer payload 2 IoCs
-
Strela stealer
An info stealer targeting mail credentials first seen in late 2022.
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\503.dll,#11⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
136KB
-
Filesize
136KB