Analysis
-
max time kernel
132s -
max time network
138s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
05-11-2024 07:54
General
-
Target
b002beb2ffec00710ca0e89c29690e022adf2332f139d83d3b9c6165fa6e8ae3.dll
-
Size
600KB
-
MD5
228e23af65d5bbba1c392bd688e3f857
-
SHA1
e8e8ad04167abea0a8a0adb35606a2c61135b2b6
-
SHA256
b002beb2ffec00710ca0e89c29690e022adf2332f139d83d3b9c6165fa6e8ae3
-
SHA512
c43a70d21ed2bb86f83e57044fa5effa96ba2f84ab3e036455e696e291eb1c2150b66322cbdd3e2f2e01f339132e89770212b2cf0dc1bd4579a8fab536ac5b39
-
SSDEEP
12288:8+v/aSUoOMbIh/w2+4YzPyRu5KmKpauEUCL1UH0/EFl+:bHagcw4kPQuEHlEjhK
Score
10/10
Malware Config
Extracted
Family
strela
C2
94.159.113.86
Attributes
-
url_path
/server.php
Signatures
-
Detects Strela Stealer payload 3 IoCs
-
Strela family
-
Strela stealer
An info stealer targeting mail credentials first seen in late 2022.
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\b002beb2ffec00710ca0e89c29690e022adf2332f139d83d3b9c6165fa6e8ae3.dll,#11⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
140KB
-
Filesize
140KB
-
Filesize
140KB