Analysis
-
max time kernel
91s -
max time network
94s -
platform
windows11-21h2_x64 -
resource
win11-20240709-en -
resource tags
arch:x64arch:x86image:win11-20240709-enlocale:en-usos:windows11-21h2-x64system -
submitted
15-07-2024 11:59
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
c9223b38490d99982d99d5a6a7ee288a0147885038b4ad63b1aa7f86165564f0.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
c9223b38490d99982d99d5a6a7ee288a0147885038b4ad63b1aa7f86165564f0.dll
-
Size
124KB
-
MD5
674f26ee35d3dc029245cf2d97098921
-
SHA1
88b769ebbfc2b632635aab44cb3f1e0b95a59166
-
SHA256
c9223b38490d99982d99d5a6a7ee288a0147885038b4ad63b1aa7f86165564f0
-
SHA512
77bc4433c4e791df21d54ee3bafaac16d9c68b7b9514b4c058275f7e8efe6952e33f6df20d26496440ca4680def49426705c919302259d98b04eb536ff23899d
-
SSDEEP
3072:HCZcwxqUVIkTA/5u4q82AX8/OQcJ0psXCpeBhqK:H8EUy/C826acJasgeB
Malware Config
Extracted
Family
strela
C2
45.9.74.32
Attributes
-
url_path
/out.php
-
user_agent
Mozilla/4.0 (compatible)
Signatures
-
Detects Strela Stealer payload 2 IoCs
resource yara_rule behavioral2/memory/5992-0-0x00000158F56A0000-0x00000158F56C2000-memory.dmp family_strela behavioral2/memory/5992-1-0x00000158F56A0000-0x00000158F56C2000-memory.dmp family_strela