strela | 49b9d2d7fd358a09ecd0c9706bd5ced830a998460362495c45f3434d9706fda2

Analysis

max time kernel
93s
max time network
94s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
15/07/2024, 02:03

Target
5f7f206aa6bce8300ee86c11f5fbc2e0N.dll
Size 125KB
Sample240715-cg2dfsshlp
SHA256 49b9d2d7fd358a09ecd0c9706bd5ced830a998460362495c45f3434d9706fda2
MD5 5f7f206aa6bce8300ee86c11f5fbc2e0
SHA1 9024ebc6ce0933a5de442ead2f66664697415d1e
SHA512 a275a59c84230523b5103089311f5294b4f58124a0c46d28f50455852edc47f89c4cdd1b7488af0e711e92b606113647b41be5135d9aaed2a48dde274b3667ca
SSDEEP 3072:cXA7lPfvoWRpcQOVMzsI0REnvn4cVBHxwfCH6q2weTY:ca1vxRpSVEsEv4cVFxwKH5eTY
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

strela stealer

Family

Attributes

Detects Strela Stealer payload 1 IoCs

resource	yara_rule
behavioral2/memory/5112-0-0x0000017B80A60000-0x0000017B80A82000-memory.dmp	family_strela

Strela stealer
An info stealer targeting mail credentials first seen in late 2022.
stealer strela

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\5f7f206aa6bce8300ee86c11f5fbc2e0N.dll,#1
1⤵
PID:5112