Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
14-07-2024 15:59
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
09554efb56f3770aecebb9087e84c640N.dll
Resource
win7-20240708-en
2 signatures
150 seconds
General
-
Target
09554efb56f3770aecebb9087e84c640N.dll
-
Size
125KB
-
MD5
09554efb56f3770aecebb9087e84c640
-
SHA1
60f6f26ad5e5c2f0c606d50e07b207d6b291b554
-
SHA256
0b6695976863792f68856bfb2d4d682cc0f468d0f1eccbed6ea463ca76e9d329
-
SHA512
6941af1fedac2a1b783e8a6508124ed7e403698d460e34088aa05d68ee2ec3eb62c4018244b5553ee247ea7ccf55e938fe3aaca1c89e0f84eb21d15b57d20876
-
SSDEEP
3072:Lpfe+jt5UdNSEOSlLx/fAscJ+IaaMb+CwYuj2tK4gq:tfe+jnUnO63A1J+ITCpua
Malware Config
Extracted
Family
strela
C2
45.9.74.32
Attributes
-
url_path
/out.php
-
user_agent
Mozilla/4.0 (compatible)
Signatures
-
Detects Strela Stealer payload 2 IoCs
resource yara_rule behavioral2/memory/4480-0-0x0000028205A50000-0x0000028205A72000-memory.dmp family_strela behavioral2/memory/4480-1-0x0000028205A50000-0x0000028205A72000-memory.dmp family_strela