Analysis
-
max time kernel
150s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
15-07-2024 11:59
General
-
Target
c776e16d054683dfd5c6280c9d4009bbe95a9d2d3a4f7855690409d89dd23dfd.dll
-
Size
124KB
-
MD5
e18282d20e14cd4984a939835f61e79e
-
SHA1
6c2dd4295f015f8560d122ff1d65b3b9a7557b3e
-
SHA256
c776e16d054683dfd5c6280c9d4009bbe95a9d2d3a4f7855690409d89dd23dfd
-
SHA512
088434571083b352a366b3ea31c3d0b1536aba925b6964e2b6471067f520e0a3d2fb4ba0c23d0c6bd0ba4e67100f8a20c0168a379976c23f733a9733489dddf7
-
SSDEEP
3072:srx2x0cKeRRyNbtrxJ1kQwjXLE5Z9mm2y1:srxElTRENiXuZQm1
Score
10/10
Malware Config
Extracted
Family
strela
C2
45.9.74.32
Attributes
-
url_path
/out.php
-
user_agent
Mozilla/4.0 (compatible)
Signatures
-
Detects Strela Stealer payload 2 IoCs
-
Strela stealer
An info stealer targeting mail credentials first seen in late 2022.
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\c776e16d054683dfd5c6280c9d4009bbe95a9d2d3a4f7855690409d89dd23dfd.dll,#11⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
136KB
-
Filesize
136KB