strela | 0590da5914777ce369d62b2f1dbf7064a53093aa99cc3b3bb17abdbc686d562b | Triage

Analysis

max time kernel
92s
max time network
94s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
15-07-2024 20:23

Sharing

Report Analysis Logs

General

Target

04aec3a5d37f63237ca966cded8deae0N.dll
Size

122KB
MD5

04aec3a5d37f63237ca966cded8deae0
SHA1

ec94cb884c266952032513454f0846837f929e75
SHA256

0590da5914777ce369d62b2f1dbf7064a53093aa99cc3b3bb17abdbc686d562b
SHA512

5e3e2e06473797c25b1839c01624143d1301c70b743032fd2c60994783a934fa95d84bec679f512641e9541c0f743a558ade70db3ea204e28a560984cea84730
SSDEEP

3072:zB0Rsm1ZfEWcMgwZnqhkZwKiilRP9PF7F7WNP:GRHfE2gwpZZwK7PZWV

Score

10^/10

strela stealer

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes

url_path
/out.php
user_agent
Mozilla/4.0 (compatible)

Signatures

Detects Strela Stealer payload 2 IoCs

resource	yara_rule
behavioral2/memory/4636-0-0x0000018974FA0000-0x0000018974FC2000-memory.dmp	family_strela
behavioral2/memory/4636-1-0x0000018974FA0000-0x0000018974FC2000-memory.dmp	family_strela

Strela stealer
An info stealer targeting mail credentials first seen in late 2022.
stealer strela

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\04aec3a5d37f63237ca966cded8deae0N.dll,#1
1⤵
PID:4636

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4636-0-0x0000018974FA0000-0x0000018974FC2000-memory.dmp

Filesize
136KB

Download
memory/4636-1-0x0000018974FA0000-0x0000018974FC2000-memory.dmp

Filesize
136KB

Download