Analysis
- max time kernel
140s - max time network
129s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
17/10/2024, 10:41
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
15287772319514.dll
Resource
win7-20240708-en
2 signatures
150 seconds
General
- Target 15287772319514.dll
- Size 262KB
- Sample241017-mq39hsxdpp
- SHA256 b9ae263904d3a5fb8471a0f8ab95fcbb224f632e6185e3a110e8d5aed9785420
- MD5 0f3321211cf033948c985df8ed5779ad
- SHA1 8b92e5dd7ad39aed2668adaaf692682e9e9f5258
- SHA512 b362fb91274e0a7c6115c5dfd2984d6ac220b8848d54e2c70fc743e76fcf89a9e9ada4d37ff03b1fd1827a7796899be7546a23306fe9bbac1d992f969793d6a9
- SSDEEP 6144:Z0MNKWD01gxyK+j1kzdhCLV+a7l5xkyxHcX3JSRBsorKV/c9JX:Z0AKW00G1k/CB+Ul5xkuHcX3JUBO4JX
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Extracted
Family
-
strela
C2
-
94.159.113.48
Attributes
-
url_path
/server.php
Signatures
- Detects Strela Stealer payload 3 IoCs
resource yara_rule behavioral2/memory/2072-1-0x000001CCE3220000-0x000001CCE3243000-memory.dmp family_strela behavioral2/memory/2072-2-0x000001CCE3220000-0x000001CCE3243000-memory.dmp family_strela behavioral2/memory/2072-3-0x000001CCE3220000-0x000001CCE3243000-memory.dmp family_strela