strela | ae7c183d5b8a7fd7d414ce873547cc3b1efa0885da9304611ad7a54e96486822 | Triage

Analysis

max time kernel
118s
max time network
121s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
19-07-2024 21:57

Sharing

Report Analysis Logs

General

Target

11e9c1889c4705c019aeb0a5a99a08a0N.dll
Size

166KB
MD5

11e9c1889c4705c019aeb0a5a99a08a0
SHA1

2568385c63e0b488eaa27c6b7d62f6f695b9db58
SHA256

ae7c183d5b8a7fd7d414ce873547cc3b1efa0885da9304611ad7a54e96486822
SHA512

90c674f4bfb5b16e833394f6e60454fc8d657c24eb13466d65cafceaf24ba0d162a7fd5058631e1b6cf3affb0345a4604c4fa536bd318b1de28aa9df0ff56343
SSDEEP

3072:GKUy73uIPuwe+WQkPa8bOQgqIgoo6JM7W6WD9C:ptifiQgqIssE

Score

10^/10

strela stealer

Malware Config

Extracted

Family

strela

C2

45.9.74.36

Attributes

url_path
/out.php
user_agent
Mozilla/4.0 (compatible)

Signatures

Detects Strela Stealer payload 1 IoCs

resource	yara_rule
behavioral1/memory/2736-0-0x0000000000670000-0x0000000000692000-memory.dmp	family_strela

Strela stealer
An info stealer targeting mail credentials first seen in late 2022.
stealer strela

C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\11e9c1889c4705c019aeb0a5a99a08a0N.dll
1⤵
PID:2736

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2736-0-0x0000000000670000-0x0000000000692000-memory.dmp

Filesize
136KB

Download