Analysis
-
max time kernel
13s -
max time network
18s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
21-07-2024 15:14
General
-
Target
5f6d0197a069f38b8fe76f3f26cc01a0N.dll
-
Size
125KB
-
MD5
5f6d0197a069f38b8fe76f3f26cc01a0
-
SHA1
9ac073779d869ef28f070cccb015b82c73c2d461
-
SHA256
c2f02a192f71ac5ea357eec54eab001ee27a21216be2e2b41e81037f40616bf2
-
SHA512
a7fa937252964ade5a22afa35283515f1a74c3611500a9bc8b5cf9314ad4ebf93877b54107f154505007dec074b48c04b4873bdb9dca65e1ca2e476fccc06b3b
-
SSDEEP
3072:/6WqPB+3UkSxorDhQQm2QzwdRiEZOqVYezu/zu05SA6EM:i1+kHo5xQUvZOqVJ+z/0Ay
Score
10/10
Malware Config
Extracted
Family
strela
C2
45.9.74.32
Attributes
-
url_path
/out.php
-
user_agent
Mozilla/4.0 (compatible)
Signatures
-
Detects Strela Stealer payload 1 IoCs
-
Strela stealer
An info stealer targeting mail credentials first seen in late 2022.
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\5f6d0197a069f38b8fe76f3f26cc01a0N.dll,#11⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
136KB