Analysis
-
max time kernel
150s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240704-en -
resource tags
arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system -
submitted
15/07/2024, 12:03
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
9a4ac96143ddd60b9a5067925adc76b0b8488ecba3e48d14de018a24db567586.dll
Resource
win10v2004-20240704-en
2 signatures
150 seconds
General
-
Target
9a4ac96143ddd60b9a5067925adc76b0b8488ecba3e48d14de018a24db567586.dll
-
Size
123KB
-
MD5
e052287dedda801ccad7225c80a4274f
-
SHA1
a7318af21e951abad7fe3e7decde17191a308cab
-
SHA256
9a4ac96143ddd60b9a5067925adc76b0b8488ecba3e48d14de018a24db567586
-
SHA512
14bc96701dc5958a7e2dba6c92afbc6b740007ef44528381bdf674768e23c81843181cbc98a43fa6835c1df70196f4fc03b05c0c1ebf72af44532d0df1bfbbf2
-
SSDEEP
1536:kfouW19ToFcA1vJr6nmNH8jXWT85xTQ49Sz3oIKOskBaVbGI3DCS3/YeRIp+paCo:cG1tFA1vhnTSZC4fHFyI3Dno8gCJo1U
Malware Config
Extracted
Family
strela
C2
45.9.74.32
Attributes
-
url_path
/out.php
-
user_agent
Mozilla/4.0 (compatible)
Signatures
-
Detects Strela Stealer payload 2 IoCs
resource yara_rule behavioral1/memory/3372-0-0x0000025941870000-0x0000025941892000-memory.dmp family_strela behavioral1/memory/3372-1-0x0000025941870000-0x0000025941892000-memory.dmp family_strela