Overview
overview
10Static
static
313531bd403...2b.dll
windows10-1703-x64
1013531bd403...2b.dll
windows10-2004-x64
1013531bd403...2b.dll
windows11-21h2-x64
101970d38e7f...ff.dll
windows10-1703-x64
101970d38e7f...ff.dll
windows10-2004-x64
101970d38e7f...ff.dll
windows11-21h2-x64
1077836c0b18...c5.dll
windows10-1703-x64
1077836c0b18...c5.dll
windows10-2004-x64
1077836c0b18...c5.dll
windows11-21h2-x64
10bd26724bdc...11.dll
windows10-1703-x64
1bd26724bdc...11.dll
windows10-2004-x64
1bd26724bdc...11.dll
windows11-21h2-x64
1dbd301f710...c6.dll
windows10-1703-x64
10dbd301f710...c6.dll
windows10-2004-x64
10dbd301f710...c6.dll
windows11-21h2-x64
10Analysis
-
max time kernel
134s -
max time network
123s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
24-10-2024 13:21
Static task
static1
Behavioral task
behavioral1
Sample
13531bd403e5f8f607bf16144c38ffd94004eafa8e6a098628b915de07ba432b.dll
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
13531bd403e5f8f607bf16144c38ffd94004eafa8e6a098628b915de07ba432b.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
13531bd403e5f8f607bf16144c38ffd94004eafa8e6a098628b915de07ba432b.dll
Resource
win11-20241007-en
Behavioral task
behavioral4
Sample
1970d38e7fa45a46e792372a19d890541c87d1007ddedd53858b6df6728d72ff.dll
Resource
win10-20240404-en
Behavioral task
behavioral5
Sample
1970d38e7fa45a46e792372a19d890541c87d1007ddedd53858b6df6728d72ff.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral6
Sample
1970d38e7fa45a46e792372a19d890541c87d1007ddedd53858b6df6728d72ff.dll
Resource
win11-20241023-en
Behavioral task
behavioral7
Sample
77836c0b18bbfef70fd04ba674ea045bf109851efe76ae9bcc55c2dcd08cc3c5.dll
Resource
win10-20240404-en
Behavioral task
behavioral8
Sample
77836c0b18bbfef70fd04ba674ea045bf109851efe76ae9bcc55c2dcd08cc3c5.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
77836c0b18bbfef70fd04ba674ea045bf109851efe76ae9bcc55c2dcd08cc3c5.dll
Resource
win11-20241007-en
Behavioral task
behavioral10
Sample
bd26724bdc8c5d9cb65d361231048725fbc31072d4c457c23531bc4333460011.dll
Resource
win10-20240404-en
Behavioral task
behavioral11
Sample
bd26724bdc8c5d9cb65d361231048725fbc31072d4c457c23531bc4333460011.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral12
Sample
bd26724bdc8c5d9cb65d361231048725fbc31072d4c457c23531bc4333460011.dll
Resource
win11-20241007-en
Behavioral task
behavioral13
Sample
dbd301f710d45acdd639cda5cd47a5453b9abb8a361ed250bfc47de70318fec6.dll
Resource
win10-20240404-en
Behavioral task
behavioral14
Sample
dbd301f710d45acdd639cda5cd47a5453b9abb8a361ed250bfc47de70318fec6.dll
Resource
win10v2004-20241007-en
General
-
Target
dbd301f710d45acdd639cda5cd47a5453b9abb8a361ed250bfc47de70318fec6.dll
-
Size
252KB
-
MD5
b5abd3a8d68ee38e4ea54c28e773780d
-
SHA1
cbdfe5904ef25fb17cb9bc625e680c4a39c73fd0
-
SHA256
dbd301f710d45acdd639cda5cd47a5453b9abb8a361ed250bfc47de70318fec6
-
SHA512
f7e50c3874d9d804f8e2ec8c05663eb6a741c2f54b607904e99488738bf59d232ea2847b44dbafb109eca94e5fe756c85ebd2f28e34a12452565f63a68672c36
-
SSDEEP
6144:/neLZdltBao31NL+Icl/n8jZoaTvx/jSYZTCWeqIn04Nl79:/eLZddRN60jSaTvxrDTSqIvb79
Malware Config
Extracted
strela
94.159.113.48
-
url_path
/server.php
Signatures
-
Detects Strela Stealer payload 3 IoCs
Processes:
resource yara_rule behavioral14/memory/1296-0-0x000001BCA2730000-0x000001BCA2753000-memory.dmp family_strela behavioral14/memory/1296-1-0x000001BCA2730000-0x000001BCA2753000-memory.dmp family_strela behavioral14/memory/1296-3-0x000001BCA2730000-0x000001BCA2753000-memory.dmp family_strela