Analysis
- max time kernel
93s - max time network
95s - platform
windows10-2004_x64 - resource
win10v2004-20240709-en - resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system - submitted
16/07/2024, 00:03
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
330e7efb1bfa6ed5b8e38fc5223b16e0N.dll
Resource
win7-20240704-en
2 signatures
120 seconds
General
- Target 330e7efb1bfa6ed5b8e38fc5223b16e0N.dll
- Size 124KB
- Sample240716-achpfawbkl
- SHA256 f7bf329f95796e4d77055433a5a1f46b01b6975f08ae5cee31c24f8bce6bba0d
- MD5 330e7efb1bfa6ed5b8e38fc5223b16e0
- SHA1 71a0eff2d980554d4172deac4fc0dc51ab82c44f
- SHA512 db59fc961b757ae058ce05b37b780865d4cdc8546e996a7b97434228da75384f8f5d7fbe201b18e693ea357b71437003c57d596e0393e6d2ef7df2a4a348d837
- SSDEEP 3072:cu2BUJ7MqQY8R/7fgKgHI02p90SPguXkdVJYvk5fNeX:vXQrgKC2LZ9Bew
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Extracted
Family
-
strela
C2
-
45.9.74.32
Attributes
-
url_path
/out.php
-
user_agent
Mozilla/4.0 (compatible)
Signatures
- Detects Strela Stealer payload 2 IoCs
resource yara_rule behavioral2/memory/2624-0-0x00000195BB1F0000-0x00000195BB212000-memory.dmp family_strela behavioral2/memory/2624-1-0x00000195BB1F0000-0x00000195BB212000-memory.dmp family_strela