Analysis
-
max time kernel
143s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
22-10-2024 22:17
General
-
Target
a5488b427fd51b6455feab4fa32c75ac76e1d9d33036f871d6384f038a9eef37N.dll
-
Size
247KB
-
MD5
9fa3a85a0da418dd2b408f46c0eefc50
-
SHA1
a0cf93345a3ac8613f6bd83241d03dbea2e03ae5
-
SHA256
a5488b427fd51b6455feab4fa32c75ac76e1d9d33036f871d6384f038a9eef37
-
SHA512
52486db77e8b44608f0ea44016c5852d45d6984b40645798f6e09be469ed93b6b6933137ea77bd9822252713848452bf684182e9a33c8372f89f55e501645a0c
-
SSDEEP
6144:KuZLbK3Y3LDeKM2t87ZT/OxaA0Cdj22yCzSVL5L:zK3YMzOoA0qj22yCzU
Score
10/10
Malware Config
Extracted
Family
strela
C2
94.159.113.48
Attributes
-
url_path
/server.php
Signatures
-
Detects Strela Stealer payload 2 IoCs
-
Strela stealer
An info stealer targeting mail credentials first seen in late 2022.
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\a5488b427fd51b6455feab4fa32c75ac76e1d9d33036f871d6384f038a9eef37N.dll,#11⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
140KB
-
Filesize
140KB