Analysis
-
max time kernel
142s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
15-07-2024 12:00
General
-
Target
525b3981a71546597dd485d95151d53901d16be9b3c5ef7311ec9c2913084198.dll
-
Size
129KB
-
MD5
f6c19e34d98702c01cf1b14c9ba01091
-
SHA1
27675b398bcb509be6859959cfb42b523a57117e
-
SHA256
525b3981a71546597dd485d95151d53901d16be9b3c5ef7311ec9c2913084198
-
SHA512
cbdedccd03e43599194929d467c9a61f0263c8e87c2706ef1ca282b01cafd49991cbc88974a7a6f8cdd30637370a13ebcdbb1853625956b5321c86772f4a2f80
-
SSDEEP
3072:d4Qvzuf6qq5NVgxzzbcrACJXhnAWbf+zqq0lKgnR0EW0e+TvkXNC/gA/g:jzqq58B/IJhNbf+zqqym0e+6NnA
Score
10/10
Malware Config
Extracted
Family
strela
C2
45.9.74.32
Attributes
-
url_path
/out.php
-
user_agent
Mozilla/4.0 (compatible)
Signatures
-
Detects Strela Stealer payload 2 IoCs
-
Strela stealer
An info stealer targeting mail credentials first seen in late 2022.
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\525b3981a71546597dd485d95151d53901d16be9b3c5ef7311ec9c2913084198.dll,#11⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
136KB
-
Filesize
136KB