Analysis
-
max time kernel
148s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
15-07-2024 12:00
General
-
Target
17cf8977319a68f24a2a3f056fbea75f7738903e8952cf0f8b1412887f019130.dll
-
Size
125KB
-
MD5
a59de5d57773fc42e61c0222553ea129
-
SHA1
7d6b2f8e034967be14d7c0418edf1d0e7d4cd953
-
SHA256
17cf8977319a68f24a2a3f056fbea75f7738903e8952cf0f8b1412887f019130
-
SHA512
f44c7404c6e4b53977d5565b661a2b337f383413aca117b788d8dcd68abb5af9a61d15c5e123e069e01cefc4bf4caf82c6d3765fc21252bdfab01e3f0a591027
-
SSDEEP
3072:Ovh0dbsB5vMBt6/AkvnabWLYHFZEvmosMdwoYG5NZgvbK9:mtTvM36/tWFoYG5
Score
10/10
Malware Config
Extracted
Family
strela
C2
45.9.74.32
Attributes
-
url_path
/out.php
-
user_agent
Mozilla/4.0 (compatible)
Signatures
-
Detects Strela Stealer payload 2 IoCs
-
Strela stealer
An info stealer targeting mail credentials first seen in late 2022.
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\17cf8977319a68f24a2a3f056fbea75f7738903e8952cf0f8b1412887f019130.dll,#11⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
136KB
-
Filesize
136KB