Analysis
-
max time kernel
149s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
15/07/2024, 12:22
General
-
Target
abe8d764ddd7f789187d85e0b3e9096934f38ce816a97a32a253d1b374342875.dll
-
Size
126KB
-
MD5
8465b117281d6a74c4b1c1c5ce2198b2
-
SHA1
fa92cd879188f6799c523975ca71cbaa055b4237
-
SHA256
abe8d764ddd7f789187d85e0b3e9096934f38ce816a97a32a253d1b374342875
-
SHA512
3eb9ba1893e59fe80f38d7a16e28758cfd9fc7f3440bfee821b2f09a892afe763eecd46e460e035bee52fd80e7c58b09e48976a00e4f5417fbcc44ba7e118a27
-
SSDEEP
3072:2gViL9rszYgGZwkYYt4Yp3KW34wx8kVlIMG:H29rsz74tlIB
Score
10/10
Malware Config
Extracted
Family
strela
C2
45.9.74.32
Attributes
-
url_path
/out.php
-
user_agent
Mozilla/4.0 (compatible)
Signatures
-
Detects Strela Stealer payload 2 IoCs
-
Strela stealer
An info stealer targeting mail credentials first seen in late 2022.
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\abe8d764ddd7f789187d85e0b3e9096934f38ce816a97a32a253d1b374342875.dll,#11⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
136KB
-
Filesize
136KB