Analysis
-
max time kernel
94s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
16-07-2024 13:57
General
-
Target
cdf7ae29336131143e5c19be8ca12680N.dll
-
Size
123KB
-
MD5
cdf7ae29336131143e5c19be8ca12680
-
SHA1
c6857f1b4695e9beac88c5b350b6cfabdf4c393f
-
SHA256
0bdc0ac4c20f73e599b7debb619c55f6910db33ecf3dd638e0ca4ee9ac1e64d1
-
SHA512
5dfaa781294833b8868bfb24182c14d809d0cec166f029294d1cc1901fa1e5d3e70f033524838f49f5b73ccddd5f8512b06deac37648eb1c18f9d8c23f1c9bf6
-
SSDEEP
1536:6Lg+9sgm3i3FM56PVW6QBnX0m4KGk4b7InI1lzcMpMDsOrhN6AZP+QGNLqP8/3+I:Gg+CLi3+IKZGLIn3T3/6a+QGNLq47t
Score
10/10
Malware Config
Extracted
Family
strela
C2
45.9.74.32
Attributes
-
url_path
/out.php
-
user_agent
Mozilla/4.0 (compatible)
Signatures
-
Detects Strela Stealer payload 2 IoCs
-
Strela stealer
An info stealer targeting mail credentials first seen in late 2022.
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\cdf7ae29336131143e5c19be8ca12680N.dll,#11⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
136KB
-
Filesize
136KB