Overview

overview

10

Static

static

3

43bf019011...0N.dll

windows7-x64

10

43bf019011...0N.dll

windows10-2004-x64

10

Analysis

  • max time kernel
    117s
  • max time network
    117s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    18-07-2024 01:25

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    43bf0190110e7087e18625f06f5b3520N.dll

  • Size

    124KB

  • MD5

    43bf0190110e7087e18625f06f5b3520

  • SHA1

    c5e84e3db05459403dd165a17f84ee33067b0488

  • SHA256

    bd5b40a21e5041e92c666345893adc868653e39193205a9eadebd9f418ed211c

  • SHA512

    107996b58e03822cb606755a9d2a238a1212d61a7cbfaedf10d4211d147fb91b77bf0e787265b9105b6229e37a3860d2cbfe9f56ffd377e0d481ec2e336fbf40

  • SSDEEP

    3072:Op/GGR2jv2bEeLIMkxfbBn4cVypZIqXXe/QaOi5c52F8iH:OcGRov2gwoDBniEqHH1sz

Score
10/10
strelastealer

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Signatures

  • Detects Strela Stealer payload 1 IoCs
  • Strela stealer

    An info stealer targeting mail credentials first seen in late 2022.

    stealerstrela

Processes

  • C:\Windows\system32\rundll32.exe
    rundll32.exe C:\Users\Admin\AppData\Local\Temp\43bf0190110e7087e18625f06f5b3520N.dll,#1
    1⤵
      PID:2372

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2372-0-0x00000000002C0000-0x00000000002E2000-memory.dmp

      Filesize

      136KB

      Download