Analysis
-
max time kernel
95s -
max time network
96s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
15-07-2024 21:49
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
15936ef2cebe3ad74e12d708acd43810N.dll
Resource
win7-20240704-en
windows7-x64
2 signatures
120 seconds
General
-
Target
15936ef2cebe3ad74e12d708acd43810N.dll
-
Size
123KB
-
MD5
15936ef2cebe3ad74e12d708acd43810
-
SHA1
d90993c2dae2007d9acac340572faf798527c493
-
SHA256
12219869ff459f7338a789158811eb90ce7ed83ac6513c74ac5e548f31f1d9b1
-
SHA512
4f4ab6d04aeff70a5a0a3d5bab7b973cbdcc6c71880b8c84a32c0b1a6e9e8f9b380dbec3ea3dbc70b1553112c9b8d04e2ed9180d7b942bcfbed9219311dd58c3
-
SSDEEP
1536:1pFvnk0GHl/G58RKSTJMZVgWt4A2+VHedgcCBpSnrqwwGx9he/djhYSaIdkcDg2a:1Xk0GVuOXk+4nPedTCBerSWhe/dVe+
Malware Config
Extracted
Family
strela
C2
45.9.74.32
Attributes
-
url_path
/out.php
-
user_agent
Mozilla/4.0 (compatible)
Signatures
-
Detects Strela Stealer payload 2 IoCs
resource yara_rule behavioral2/memory/5048-0-0x000001980BEB0000-0x000001980BED2000-memory.dmp family_strela behavioral2/memory/5048-1-0x000001980BEB0000-0x000001980BED2000-memory.dmp family_strela