Analysis
-
max time kernel
95s -
max time network
125s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
15-07-2024 12:33
General
-
Target
23849161f43860225244a996c19ad8bf638acdd8163f2112cfa191b2c2962763.dll
-
Size
122KB
-
MD5
c7c476c0015be85c08d57938695fb631
-
SHA1
0eda64572ac4ed0d3d1fc3c40e799d7531de04c0
-
SHA256
23849161f43860225244a996c19ad8bf638acdd8163f2112cfa191b2c2962763
-
SHA512
36ee60f5b643a838e5ad3812d2fc1493e533f66d0e76fa2abdb956c4ff9234810f0dd79bb6c3d8c5aaedbc4a9321a8895c3153cb13fba913581bdb7c8650dd66
-
SSDEEP
3072:A1Y6dCOGMq3T9MUM6/ueao5OsTVjnpLBB3PPilduarkxLS86mPB:Ae6dn/UMcxV0p2
Score
10/10
Malware Config
Extracted
Family
strela
C2
45.9.74.32
Attributes
-
url_path
/out.php
-
user_agent
Mozilla/4.0 (compatible)
Signatures
-
Detects Strela Stealer payload 2 IoCs
-
Strela stealer
An info stealer targeting mail credentials first seen in late 2022.
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\23849161f43860225244a996c19ad8bf638acdd8163f2112cfa191b2c2962763.dll,#11⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
136KB
-
Filesize
136KB