Analysis
-
max time kernel
94s -
max time network
96s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
15-07-2024 12:08
General
-
Target
6df8b68511872b564d79837fa93228a18df1acec758f96f1eb872a1e5fcd5288.dll
-
Size
125KB
-
MD5
0b3d9eee5d81cdd2e597dc9e377da12d
-
SHA1
9f34f9a9a824c00ed33a115d4869e36d83f849fb
-
SHA256
6df8b68511872b564d79837fa93228a18df1acec758f96f1eb872a1e5fcd5288
-
SHA512
26699ed090d2aa94e243d4f4f0aa78aa696e72ae66377f58869c0a687f17120e47ce47e5630cd6d05c70dea87a86fb0e2f69ca5f1d78e37f80670ed5aba1f1b4
-
SSDEEP
3072:1a8Wl0STSIcWhtvAP7JBTRnK9srvfkBgKuU4FP:YJSIcWLvMDTA9Qv8p3
Score
10/10
Malware Config
Extracted
Family
strela
C2
45.9.74.32
Attributes
-
url_path
/out.php
-
user_agent
Mozilla/4.0 (compatible)
Signatures
-
Detects Strela Stealer payload 2 IoCs
-
Strela stealer
An info stealer targeting mail credentials first seen in late 2022.
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\6df8b68511872b564d79837fa93228a18df1acec758f96f1eb872a1e5fcd5288.dll,#11⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
136KB
-
Filesize
136KB