Analysis
-
max time kernel
94s -
max time network
96s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
16-07-2024 12:12
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
bbeb4b662b50b5740f338109b9ce9fb0N.dll
Resource
win7-20240708-en
windows7-x64
2 signatures
120 seconds
General
-
Target
bbeb4b662b50b5740f338109b9ce9fb0N.dll
-
Size
123KB
-
MD5
bbeb4b662b50b5740f338109b9ce9fb0
-
SHA1
79850bc89b99cbb4ac4fcef124e41ce6b6ef5760
-
SHA256
915dd58fa52dd84d45e22514bf94f41c4808794c157aaed37f52ae3d2944bdf8
-
SHA512
db03f74fb51a2680c7c725b1e4896cd13f6a796bcac39e59cb8e0ba7ee5cc8bb041f933cf95ffe81c0f6fc74cedca631a91574ae72c96831442c75c79864c6ab
-
SSDEEP
1536:X4AbcioRJxiLF9Gt0+uxDBpEh4sGcwapFkcSAvV1Z7Oo4y5oPKatpoIaYNV/Asuf:IAQj29oBCjSAAvP+shYNbOoe
Malware Config
Extracted
Family
strela
C2
45.9.74.32
Attributes
-
url_path
/out.php
-
user_agent
Mozilla/4.0 (compatible)
Signatures
-
Detects Strela Stealer payload 2 IoCs
resource yara_rule behavioral2/memory/2244-0-0x000002411AD60000-0x000002411AD82000-memory.dmp family_strela behavioral2/memory/2244-1-0x000002411AD60000-0x000002411AD82000-memory.dmp family_strela