strela | a145a52bba36cc8397925df9f7dbe61299bc3d12e8cacbe3ab9397490576ef6d | Triage

Analysis

max time kernel
118s
max time network
120s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
16-07-2024 09:47

Sharing

Report Analysis Logs

General

Target

a0dfc8228852d877b4407859fa9a0f00N.dll
Size

123KB
MD5

a0dfc8228852d877b4407859fa9a0f00
SHA1

c2e32a959aababcfcce0d77613b18ef01066de12
SHA256

a145a52bba36cc8397925df9f7dbe61299bc3d12e8cacbe3ab9397490576ef6d
SHA512

fd07bc67c2dccfbbca3d862e22606cf11f7e105df21d33df1d3fa4ab3dfdbd43023c1e6150a876229f0fe85b7b9bd301741829ec174c0a9b14c4243fd311de76
SSDEEP

3072:PpkEfXbYIdbv29qxkCpK+b9vMO2bfItT8:BkEfX8+T2m5QTmg

Score

10^/10

strela stealer

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes

url_path
/out.php
user_agent
Mozilla/4.0 (compatible)

Signatures

Detects Strela Stealer payload 1 IoCs

resource	yara_rule
behavioral1/memory/2876-0-0x00000000001D0000-0x00000000001F2000-memory.dmp	family_strela

Strela stealer
An info stealer targeting mail credentials first seen in late 2022.
stealer strela

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\a0dfc8228852d877b4407859fa9a0f00N.dll,#1
1⤵
PID:2876

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2876-0-0x00000000001D0000-0x00000000001F2000-memory.dmp

Filesize
136KB

Download