Analysis
-
max time kernel
92s -
max time network
96s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
15-07-2024 11:59
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3b412276fde794bc1ddc086be58b63d03ce5a9ff420a0d68b372c7248885f007.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
3b412276fde794bc1ddc086be58b63d03ce5a9ff420a0d68b372c7248885f007.dll
-
Size
125KB
-
MD5
fb6b970872f8696afb02ec9a16609cd1
-
SHA1
45121d6f9d571de25402450fea2c34ba1ccd4c9b
-
SHA256
3b412276fde794bc1ddc086be58b63d03ce5a9ff420a0d68b372c7248885f007
-
SHA512
4a9b8bdd5a60f8fb05c3e659f0ae3b070ff5f2c02e86eb7a129646efa107ed9d69999c68d88fe4735bc868dceb6f26de802dbcfac3c3c881b1c8370387309cef
-
SSDEEP
3072:adwrvvgqmPxPobUcOQQJABiW8ZsfXmUu/T+N:adgvvuPW4jj/DZse/iN
Malware Config
Extracted
Family
strela
C2
45.9.74.32
Attributes
-
url_path
/out.php
-
user_agent
Mozilla/4.0 (compatible)
Signatures
-
Detects Strela Stealer payload 2 IoCs
resource yara_rule behavioral1/memory/2924-0-0x0000028207800000-0x0000028207822000-memory.dmp family_strela behavioral1/memory/2924-1-0x0000028207800000-0x0000028207822000-memory.dmp family_strela