strela | 37f716c90d6a87f639ccf57ac5769268dcfd6f7ed45ab969b75258d02c8359b1 | Triage

Analysis

max time kernel
16s
max time network
17s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
16-07-2024 05:16

Sharing

Report Analysis Logs

General

Target

735bf16b2bf7e6a81b948ecc6433ca40N.dll
Size

124KB
MD5

735bf16b2bf7e6a81b948ecc6433ca40
SHA1

f711e442aeffbf49d241026df1ab23c33024e6c9
SHA256

37f716c90d6a87f639ccf57ac5769268dcfd6f7ed45ab969b75258d02c8359b1
SHA512

d69f4d29dbb37e7c6396edb65803eff89038c967b0e610c1cdb4ecf9c3083cf566eec22b1a37d45085fee989269d688c4e46059e06d60e9a071942ca3e9ca660
SSDEEP

3072:vbbTi1Vn7QNY38EcjiyjvP9LeH+ZedRh1ziO:vbbTivL85XS+ZeV1

Score

10^/10

strela stealer

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes

url_path
/out.php
user_agent
Mozilla/4.0 (compatible)

Signatures

Detects Strela Stealer payload 1 IoCs

resource	yara_rule
behavioral1/memory/2416-0-0x0000000001D60000-0x0000000001D82000-memory.dmp	family_strela

Strela stealer
An info stealer targeting mail credentials first seen in late 2022.
stealer strela

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\735bf16b2bf7e6a81b948ecc6433ca40N.dll,#1
1⤵
PID:2416

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2416-0-0x0000000001D60000-0x0000000001D82000-memory.dmp

Filesize
136KB

Download