Analysis
-
max time kernel
148s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
15-07-2024 11:59
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
c9223b38490d99982d99d5a6a7ee288a0147885038b4ad63b1aa7f86165564f0.dll
Resource
win10v2004-20240709-en
2 signatures
150 seconds
General
-
Target
c9223b38490d99982d99d5a6a7ee288a0147885038b4ad63b1aa7f86165564f0.dll
-
Size
124KB
-
MD5
674f26ee35d3dc029245cf2d97098921
-
SHA1
88b769ebbfc2b632635aab44cb3f1e0b95a59166
-
SHA256
c9223b38490d99982d99d5a6a7ee288a0147885038b4ad63b1aa7f86165564f0
-
SHA512
77bc4433c4e791df21d54ee3bafaac16d9c68b7b9514b4c058275f7e8efe6952e33f6df20d26496440ca4680def49426705c919302259d98b04eb536ff23899d
-
SSDEEP
3072:HCZcwxqUVIkTA/5u4q82AX8/OQcJ0psXCpeBhqK:H8EUy/C826acJasgeB
Malware Config
Extracted
Family
strela
C2
45.9.74.32
Attributes
-
url_path
/out.php
-
user_agent
Mozilla/4.0 (compatible)
Signatures
-
Detects Strela Stealer payload 2 IoCs
resource yara_rule behavioral1/memory/4980-0-0x000001E98FE30000-0x000001E98FE52000-memory.dmp family_strela behavioral1/memory/4980-1-0x000001E98FE30000-0x000001E98FE52000-memory.dmp family_strela