Analysis
-
max time kernel
94s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
15-07-2024 12:03
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
9db37276b6e0aa53029e648e25047fb51d599b7a77813671c8464cfd79a57467.dll
Resource
win10v2004-20240709-en
2 signatures
150 seconds
General
-
Target
9db37276b6e0aa53029e648e25047fb51d599b7a77813671c8464cfd79a57467.dll
-
Size
121KB
-
MD5
01493f58fd5665b40f7b9312ba1c1d17
-
SHA1
5ac52e196a95b5c04a8a8971e8b15d61e0d2f9f4
-
SHA256
9db37276b6e0aa53029e648e25047fb51d599b7a77813671c8464cfd79a57467
-
SHA512
9cbdf335c12ee5570b80a0354a0426ad038bb9fdd0fa62cb06ca0a02b5d6bc04af5802f259dad1c3fd808ea378f463ccc2727c9435fe78365613d80d79af99a1
-
SSDEEP
3072:Lzx7lfvvQQNKQsR1SQF4A0DAfmE0Q8dI2W5FchYz5gT7G:LzxlvvQkVlDAfeI2schmg
Malware Config
Extracted
Family
strela
C2
45.9.74.32
Attributes
-
url_path
/out.php
-
user_agent
Mozilla/4.0 (compatible)
Signatures
-
Detects Strela Stealer payload 2 IoCs
resource yara_rule behavioral1/memory/2348-0-0x00000227E5BA0000-0x00000227E5BC2000-memory.dmp family_strela behavioral1/memory/2348-1-0x00000227E5BA0000-0x00000227E5BC2000-memory.dmp family_strela