Analysis
-
max time kernel
102s -
max time network
107s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
17-07-2024 02:36
General
-
Target
53c2b2cb197224be487eda2b7e807890N.dll
-
Size
124KB
-
MD5
53c2b2cb197224be487eda2b7e807890
-
SHA1
be920016dd0d463bfcbb5889a05393ea702ce8e7
-
SHA256
7df8f82bfa27b80d89d0f088a0ae2267a6fc34f44ef8507a8c34ea85c1fb4b25
-
SHA512
509bd59435a2103dbf48a30a265b64d680f3605832085be45bfd9a925c7ecb93aab64fdd1984c727c4e1c017eed92b2b4e26d4d7c450e80298d7c9b9c2be2863
-
SSDEEP
1536:rIuF/0LqIYII2cin5xGtSl0qtioEwebAiOLKQM7MAoVsdwLmnZP7lyrcpaVYwi4P:cEIzq2ZWVDvdO+QMeLsK5
Score
10/10
Malware Config
Extracted
Family
strela
C2
45.9.74.32
Attributes
-
url_path
/out.php
-
user_agent
Mozilla/4.0 (compatible)
Signatures
-
Detects Strela Stealer payload 2 IoCs
-
Strela stealer
An info stealer targeting mail credentials first seen in late 2022.
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\53c2b2cb197224be487eda2b7e807890N.dll,#11⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
136KB
-
Filesize
136KB