Analysis
-
max time kernel
93s -
max time network
94s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
15-07-2024 23:45
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2f0d439f387a14bb02a969090bc673b0N.dll
Resource
win7-20240704-en
windows7-x64
2 signatures
120 seconds
General
-
Target
2f0d439f387a14bb02a969090bc673b0N.dll
-
Size
123KB
-
MD5
2f0d439f387a14bb02a969090bc673b0
-
SHA1
f3d1d0e0ae7182018f13fc67d690b5ad05219fea
-
SHA256
e89d529c2c104511ce481666150961230b7b22e977d8b1f4603a9441d3820600
-
SHA512
62292e77b0d5e65e45ba19bf9e425e7aaac0bf7db6cbf322c38c55a14d87275909da47604e0e834c18d43bf841bff43a9df662d90d4b3613f020d9a3e126e1a6
-
SSDEEP
3072:uhNq/p9BD9bs6/IO2bHniuzGJ4CIcItWP4MVAeGBtL:CNqFdsq8LniiGOCWWP4MmVBtL
Malware Config
Extracted
Family
strela
C2
45.9.74.32
Attributes
-
url_path
/out.php
-
user_agent
Mozilla/4.0 (compatible)
Signatures
-
Detects Strela Stealer payload 2 IoCs
resource yara_rule behavioral2/memory/2388-0-0x000001B452DE0000-0x000001B452E02000-memory.dmp family_strela behavioral2/memory/2388-1-0x000001B452DE0000-0x000001B452E02000-memory.dmp family_strela