Overview

overview

10

Static

static

3

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Analysis

  • max time kernel
    149s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    15-07-2024 12:00

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    7ab52561a4c4a34c73fe25028d45dbe450d874529226d023a7ad6fefd3809617.dll

  • Size

    124KB

  • MD5

    bf53a8513cf7809453cefd5b0c33de50

  • SHA1

    bf9ba81729500ecf103c44f1add8a6699760e930

  • SHA256

    7ab52561a4c4a34c73fe25028d45dbe450d874529226d023a7ad6fefd3809617

  • SHA512

    a3e80a6feff8cf1ecb8c24331d1c4e156bc27308a0e0eb0019c967b46683411476a9ad0403b6e514bcb785f6035ebfa772db189408cad7e251052ae6ceabaeb5

  • SSDEEP

    3072:/xktSFiVP/f6G8EWO2EFupXh7rj9ZIwHCGv01VBDIrw/+:/ytSFyP/zj52EIh7rkSC1BIrt

Score
10/10
strelastealer

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Signatures

  • Detects Strela Stealer payload 2 IoCs
  • Strela stealer

    An info stealer targeting mail credentials first seen in late 2022.

    stealerstrela

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\7ab52561a4c4a34c73fe25028d45dbe450d874529226d023a7ad6fefd3809617.dll,#1
    1⤵
      PID:4360

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4360-0-0x000001AF3E410000-0x000001AF3E432000-memory.dmp

      Filesize

      136KB

      Download

    • memory/4360-1-0x000001AF3E410000-0x000001AF3E432000-memory.dmp

      Filesize

      136KB

      Download