strela | 3f32a805adcbda7e917e07219db81a27698f70d442049066085bb8a4dc16e474

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
15/07/2024, 20:15 UTC

Target

032e197c23dcdffb75c5a89f3b26dc00N.dll
Size

125KB
MD5

032e197c23dcdffb75c5a89f3b26dc00
SHA1

cfa2b8988971b7a357061b336255ca2dfd74c9bb
SHA256

3f32a805adcbda7e917e07219db81a27698f70d442049066085bb8a4dc16e474
SHA512

211537be28b36c7978e0f8490c565c7e698dc3a1870ec88ac54174331247868e5977599b8a0386584e408dc93682fb0e7893a4c42d8482a9cc5d8f33dd027c2c
SSDEEP

3072:FhFpanZWH+qUxCfVdvo3gkIimy9cpjYXSQZLJr7fLQ:TF6ACxCfTSQ/jWVJnLQ

Score

10^/10

strela stealer

Family

strela

45.9.74.32

Attributes

Detects Strela Stealer payload 1 IoCs

resource	yara_rule
behavioral1/memory/2536-0-0x00000000003E0000-0x0000000000402000-memory.dmp	family_strela

Strela stealer
An info stealer targeting mail credentials first seen in late 2022.
stealer strela

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\032e197c23dcdffb75c5a89f3b26dc00N.dll,#1
1⤵
PID:2536

memory/2536-0-0x00000000003E0000-0x0000000000402000-memory.dmp

Filesize
136KB

Download