Analysis
-
max time kernel
148s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240704-en -
resource tags
-
submitted
15-07-2024 12:04
General
-
Target
d7199f11beaae4f35a100845e05f662c672937189f652964d20f0cfa14814598.dll
-
Size
122KB
-
MD5
2aafeac27c7ab09bb6d384e2c9f0efea
-
SHA1
cb398463769518709d81e219a50a527164c3d1af
-
SHA256
d7199f11beaae4f35a100845e05f662c672937189f652964d20f0cfa14814598
-
SHA512
3c2cda63a72fbe5b7b581332add75e08d27f763ec7efabc5aeb878bad2fce80cac8ac8862c056033635c2a24bab94d5a5e9f90cea4f8d1a80f21ecd139ba09af
-
SSDEEP
3072:LpiNnQnmf+WcI+uHwk06ZiBcjuUxpKrD:LERQnm2pXuHkoRj3xp
Score
10/10
Malware Config
Extracted
Family
strela
C2
45.9.74.32
Attributes
-
url_path
/out.php
-
user_agent
Mozilla/4.0 (compatible)
Signatures
-
Detects Strela Stealer payload 2 IoCs
-
Strela stealer
An info stealer targeting mail credentials first seen in late 2022.
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d7199f11beaae4f35a100845e05f662c672937189f652964d20f0cfa14814598.dll,#11⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
136KB
-
Filesize
136KB