Analysis
-
max time kernel
149s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
15-07-2024 12:03
General
-
Target
e31665a14b718aed05d7ade0c1f49a2a7544891e85ff7ce915d3f3306736034b.dll
-
Size
124KB
-
MD5
86e6ca2cd59546599f1fbf5d0b706faf
-
SHA1
a55e6693a80a73084885b4d5df14c3b6773b6c04
-
SHA256
e31665a14b718aed05d7ade0c1f49a2a7544891e85ff7ce915d3f3306736034b
-
SHA512
fa0949efdf677259f09af2de831f36a0ab2e4983da7e06b181ff9a21cd82c60cb5dc56ab95bb86b9b67b80dcd1c33f62fb2fe21be6f9331aa9c026953be9604b
-
SSDEEP
3072:D0GypD5EjkxU7bXeAIr/XOHRLDCxe+58lJu:pypFOk2XXkPmRGMHDu
Score
10/10
Malware Config
Extracted
Family
strela
C2
45.9.74.32
Attributes
-
url_path
/out.php
-
user_agent
Mozilla/4.0 (compatible)
Signatures
-
Detects Strela Stealer payload 2 IoCs
-
Strela stealer
An info stealer targeting mail credentials first seen in late 2022.
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\e31665a14b718aed05d7ade0c1f49a2a7544891e85ff7ce915d3f3306736034b.dll,#11⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
136KB
-
Filesize
136KB