Analysis
-
max time kernel
93s -
max time network
103s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
15-07-2024 12:15
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
f42599075d33bb661e7f193441fe14090c7f6bb2f1fc6ea950ed3622d9cc70c7.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
f42599075d33bb661e7f193441fe14090c7f6bb2f1fc6ea950ed3622d9cc70c7.dll
-
Size
124KB
-
MD5
23c5a111a09c2a5346d4e8d31a6e5e5d
-
SHA1
01166043c20d57d334a35e8a133918c02d80b7e0
-
SHA256
f42599075d33bb661e7f193441fe14090c7f6bb2f1fc6ea950ed3622d9cc70c7
-
SHA512
de66be4ad7f791ddfdc64d7ade7adc4631436acf7742b896a1a49cc95c33de85daea95946c0906d5b93544e3ad6e766be00a82a33dbe286bf2bf69f99a56a711
-
SSDEEP
3072:32dTOEG1gG1DN6ouWlmRHZi/Pb87HZjLl6Vi0L:Gd6NqG1oWlmxZlHZXl6V
Malware Config
Extracted
Family
strela
C2
45.9.74.32
Attributes
-
url_path
/out.php
-
user_agent
Mozilla/4.0 (compatible)
Signatures
-
Detects Strela Stealer payload 2 IoCs
resource yara_rule behavioral1/memory/1840-0-0x000001B1F8FA0000-0x000001B1F8FC2000-memory.dmp family_strela behavioral1/memory/1840-1-0x000001B1F8FA0000-0x000001B1F8FC2000-memory.dmp family_strela