Analysis
-
max time kernel
119s -
max time network
16s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
05-11-2024 08:46
General
-
Target
d4d49d605c25ef3f1a41c6fd24a87f22bc74177891c300399b073d5a7d219003N.dll
-
Size
423KB
-
MD5
640794086caf5d647fa17e0cb1492cd0
-
SHA1
b166eb89f19778558016262f9348379b40e6b1d2
-
SHA256
d4d49d605c25ef3f1a41c6fd24a87f22bc74177891c300399b073d5a7d219003
-
SHA512
6bd070247fbd0f72dd0a45f9191d118f773f244a96c86dd1ee14fe74ee9437ac10c8d6f2a18dc32d3478a596afa3ac1d7706ac3994edea22844fd6333137d215
-
SSDEEP
6144:dWavrT/CCbmISBh9bFVudzWAcIPiqqrPdpL0TdVq9D1RR/vB6Ch3azhqYDJQChzX:ZTJmf5uxfY2o1RbD5bYDKChzMflU
Score
10/10
Malware Config
Extracted
Family
strela
C2
94.159.113.82
Attributes
-
url_path
/server.php
Signatures
-
Detects Strela Stealer payload 3 IoCs
-
Strela family
-
Strela stealer
An info stealer targeting mail credentials first seen in late 2022.
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d4d49d605c25ef3f1a41c6fd24a87f22bc74177891c300399b073d5a7d219003N.dll,#11⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
140KB
-
Filesize
140KB
-
Filesize
140KB