strela | b49ac8505af5a70ad64408a59573b3e557e7333d46295c5a4718db95611e1492 | Triage

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
15-07-2024 22:17

Sharing

Report Analysis Logs

General

Target

1be9fbe20ef071f2be7a38c6f4885f40N.dll
Size

124KB
MD5

1be9fbe20ef071f2be7a38c6f4885f40
SHA1

13df398a954ff1ed2d847200dd5e49c0ce9cb8bd
SHA256

b49ac8505af5a70ad64408a59573b3e557e7333d46295c5a4718db95611e1492
SHA512

35aab851cb36dc01703ce2fc93f2f9a5c4b162f3209f77e3ab793147816b47793e76ba68750fc64e98b12328f6d7488d5be50b8a4ac4b15d321199a961c1b280
SSDEEP

3072:F00bDjduQO9+aiNORKSrYsSi0fLJb6XbHcL/S:60bfApviNORKe2i0TobHcG

Score

10^/10

strela stealer

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes

url_path
/out.php
user_agent
Mozilla/4.0 (compatible)

Signatures

Detects Strela Stealer payload 1 IoCs

resource	yara_rule
behavioral1/memory/2708-0-0x0000000001FC0000-0x0000000001FE2000-memory.dmp	family_strela

Strela stealer
An info stealer targeting mail credentials first seen in late 2022.
stealer strela

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\1be9fbe20ef071f2be7a38c6f4885f40N.dll,#1
1⤵
PID:2708

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2708-0-0x0000000001FC0000-0x0000000001FE2000-memory.dmp

Filesize
136KB

Download