Analysis
-
max time kernel
148s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
15/07/2024, 12:19
General
-
Target
63317d7596ad52635ce874f1c029ead24d34dfea5e4f1878b4b0443663aff0d7.dll
-
Size
123KB
-
MD5
1e726bb9e972ab3bde7c176fc5e77155
-
SHA1
2aef89bc88a56973672aa30a2396761ea98dea72
-
SHA256
63317d7596ad52635ce874f1c029ead24d34dfea5e4f1878b4b0443663aff0d7
-
SHA512
708c4ef074fb451a2d6df4b4e37fe06ad14132261bc80e2c09188af93dd9502ba6e3c54e512381c7c49666e7c8edcbb2782c8e6b6b41fa906d4b841e115edd54
-
SSDEEP
3072:1awaKKf8tFw4s6kcIj7dUlg1txk/zk6tb:JwfEFlBk1vuytVUb
Score
10/10
Malware Config
Extracted
Family
strela
C2
45.9.74.32
Attributes
-
url_path
/out.php
-
user_agent
Mozilla/4.0 (compatible)
Signatures
-
Detects Strela Stealer payload 2 IoCs
-
Strela stealer
An info stealer targeting mail credentials first seen in late 2022.
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\63317d7596ad52635ce874f1c029ead24d34dfea5e4f1878b4b0443663aff0d7.dll,#11⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
136KB
-
Filesize
136KB