strela | 486b7f0a1ddcd1b73e7dc4322691b4596206ac021de8fa5f1f79f1ed2d4b34b9 | Triage

Resubmissions

18-07-2024 01:38

240718-b2xqbsseld 10

Analysis

max time kernel
15s
max time network
20s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
18-07-2024 01:38

Sharing

Report Analysis Logs

General

Target

46c58558177811a08511e1dad71b48c0N.dll
Size

123KB
MD5

46c58558177811a08511e1dad71b48c0
SHA1

a62865d516ca46cb0a66c218cef0331db9c2ad51
SHA256

486b7f0a1ddcd1b73e7dc4322691b4596206ac021de8fa5f1f79f1ed2d4b34b9
SHA512

d8912bc31499ced9beffa58ec3b2f182ff58639394092f28808b84590c9bc51a99ba3c898b2d952c51ed293ea7d34c5299efe4267abc60943327cc3e410ca81a
SSDEEP

3072:bpOhMPUKiMB1+Vf0+PvuzUSUdF690hjmY:2f9MB1+VfLPvuadF690hSY

Score

10^/10

strela stealer

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes

url_path
/out.php
user_agent
Mozilla/4.0 (compatible)

Signatures

Detects Strela Stealer payload 1 IoCs

resource	yara_rule
behavioral1/memory/1052-0-0x00000000001E0000-0x0000000000202000-memory.dmp	family_strela

Strela stealer
An info stealer targeting mail credentials first seen in late 2022.
stealer strela

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\46c58558177811a08511e1dad71b48c0N.dll,#1
1⤵
PID:1052

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1052-0-0x00000000001E0000-0x0000000000202000-memory.dmp

Filesize
136KB

Download