Analysis
-
max time kernel
106s -
max time network
16s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
27-10-2024 13:57
General
-
Target
a9106716569fa0124812047f6533d5972f39e8049024e7f27be19f10442da540N.dll
-
Size
233KB
-
MD5
c5ec494e76a447167dd2574ce8da6950
-
SHA1
1e3059f9a0cd52f3104ee3211860f60328ecf35a
-
SHA256
a9106716569fa0124812047f6533d5972f39e8049024e7f27be19f10442da540
-
SHA512
cabe134e93f621189cef3e6a528944fef1a32f86a4d09260a3d3b1ed750b293790285ddd81b6e04583bf85a2e7d47eea75f2e0eb823a29af308800c11b3ef55e
-
SSDEEP
6144:Nji4mGSMeHDhe/uRhEF/uhxlq66VWhCF8hOXLGQEDf1rPJz:wRPNe/uHEYhxMHVWhCehSGQ4PJz
Score
10/10
Malware Config
Extracted
Family
strela
C2
94.159.113.48
Attributes
-
url_path
/server.php
Signatures
-
Detects Strela Stealer payload 2 IoCs
-
Strela family
-
Strela stealer
An info stealer targeting mail credentials first seen in late 2022.
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\a9106716569fa0124812047f6533d5972f39e8049024e7f27be19f10442da540N.dll,#11⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
140KB
-
Filesize
140KB