Analysis
-
max time kernel
95s -
max time network
96s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
15-07-2024 12:00
General
-
Target
e1d1c51c9b7dfa1c6c549481238db8e532ae20c1d882f8df4fbd8a6a0984424a.dll
-
Size
124KB
-
MD5
b12673bad5ac8c9595d8968b88f2fc58
-
SHA1
143e34aadb697df945bf9b65de6157121722c2cd
-
SHA256
e1d1c51c9b7dfa1c6c549481238db8e532ae20c1d882f8df4fbd8a6a0984424a
-
SHA512
a844a35442971d6413e76043e51eda51f41756edd4f9680d85c83759f881abfcbcd67bd7b48c0c2b060a356dbdfd3f944284f72708a3e2feb366dfca4919e782
-
SSDEEP
3072:FA8w+1zl77TMhBEAgaxxznHS1/tCQZur:Fx5d7QhK4xxzS1
Score
10/10
Malware Config
Extracted
Family
strela
C2
45.9.74.32
Attributes
-
url_path
/out.php
-
user_agent
Mozilla/4.0 (compatible)
Signatures
-
Detects Strela Stealer payload 2 IoCs
-
Strela stealer
An info stealer targeting mail credentials first seen in late 2022.
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\e1d1c51c9b7dfa1c6c549481238db8e532ae20c1d882f8df4fbd8a6a0984424a.dll,#11⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
136KB
-
Filesize
136KB