strela | 45733aed63ca85010a944077aac67242eed75d6350826bb09d7627a8609cf3cb | Triage

Analysis

max time kernel
15s
max time network
17s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
16-07-2024 00:36

Sharing

Report Analysis Logs

General

Target

3afe045373e7690d0479b7b52078e140N.dll
Size

123KB
MD5

3afe045373e7690d0479b7b52078e140
SHA1

251997a5db5bd4a1eb4d0275abaaf07d67689918
SHA256

45733aed63ca85010a944077aac67242eed75d6350826bb09d7627a8609cf3cb
SHA512

8725c8af7db9e0d9e0ffd6ca071ff53b658f4c0a4b5e76062e396a073ea429f743fe42769227cab25bcb51867f439a9804b92280c2c191ee3a212cdadb453835
SSDEEP

3072:IUYTKo+Fs2c0hE1sqJf+5mtriswF7qp8:IU1hcAwsq45Jsw

Score

10^/10

strela stealer

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes

url_path
/out.php
user_agent
Mozilla/4.0 (compatible)

Signatures

Detects Strela Stealer payload 1 IoCs

resource	yara_rule
behavioral1/memory/1488-0-0x00000000001D0000-0x00000000001F2000-memory.dmp	family_strela

Strela stealer
An info stealer targeting mail credentials first seen in late 2022.
stealer strela

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\3afe045373e7690d0479b7b52078e140N.dll,#1
1⤵
PID:1488

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1488-0-0x00000000001D0000-0x00000000001F2000-memory.dmp

Filesize
136KB

Download