Analysis
-
max time kernel
93s -
max time network
94s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
16-07-2024 06:30
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
8188c58f5586d3806272c5dbc24dbf10N.dll
Resource
win7-20240704-en
windows7-x64
2 signatures
120 seconds
General
-
Target
8188c58f5586d3806272c5dbc24dbf10N.dll
-
Size
123KB
-
MD5
8188c58f5586d3806272c5dbc24dbf10
-
SHA1
f8073e3182e3d1dd9071ba3bb20a8f48520bb0e4
-
SHA256
cde319f653fcb24cddce211cbe70c39ee76255910cb639fed1b921fbbc7568bc
-
SHA512
60390db6ad55a1fb9d72d7afd5ceac073a1a5fd323bd87ae589030cb6691d5de96aca1e71163bdbf6a42031f17c2c68edc80b14ca382417274b44efa8bc8f51d
-
SSDEEP
3072:EpgmRHWZqVztIfT0PbyST7G1MpOB3xKGhKpMf9Odce:EpgUHWZE5ETmbyK6ZBoGhmMMdD
Malware Config
Extracted
Family
strela
C2
45.9.74.32
Attributes
-
url_path
/out.php
-
user_agent
Mozilla/4.0 (compatible)
Signatures
-
Detects Strela Stealer payload 2 IoCs
resource yara_rule behavioral2/memory/4196-0-0x000001C0338B0000-0x000001C0338D2000-memory.dmp family_strela behavioral2/memory/4196-1-0x000001C0338B0000-0x000001C0338D2000-memory.dmp family_strela