Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
02-11-2024 14:35
General
-
Target
b9d53ae72d2aa4154d09acadfca5c94c87a35f9955b2b6bbb6456db1fe6d46e2.dll
-
Size
403KB
-
MD5
e3506a7208ba1d4dad6c15a9cb202d5c
-
SHA1
672df8c9f5a4127ee1718ced34dab7bd9e80dedd
-
SHA256
b9d53ae72d2aa4154d09acadfca5c94c87a35f9955b2b6bbb6456db1fe6d46e2
-
SHA512
87e459bfb5e1d7ad1781ee78e18ecb9c128f3565be3e1869233032cb11c05c29b5084924bfa95556d00543a5b2aec8115e85ef8b9ec6e9776376c8bcf1344024
-
SSDEEP
12288:Csa+X85sqbRs0+6396W58J1PUchg1nNccj:6+X8H36uW61Ncc
Score
10/10
Malware Config
Extracted
Family
strela
C2
94.159.113.82
Attributes
-
url_path
/server.php
Signatures
-
Detects Strela Stealer payload 3 IoCs
-
Strela family
-
Strela stealer
An info stealer targeting mail credentials first seen in late 2022.
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\b9d53ae72d2aa4154d09acadfca5c94c87a35f9955b2b6bbb6456db1fe6d46e2.dll,#11⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
140KB
-
Filesize
140KB
-
Filesize
140KB