Analysis
-
max time kernel
91s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
09-11-2024 03:57
General
-
Target
d1035b1292e69800a7fc1772c57ec91c8cd2daeea1b00b8bb210cfed90b29299.dll
-
Size
552KB
-
MD5
fdc667fa306b86374412d4bccaa3e36c
-
SHA1
1af9ff4d9ae002ff41659761445480d974dfad11
-
SHA256
d1035b1292e69800a7fc1772c57ec91c8cd2daeea1b00b8bb210cfed90b29299
-
SHA512
53350dc24e2c09f81b629f9c6ef4aa78c9972cf2522c417bb9d2f7e36eaaddacc3cc787f16433ba61fee809b2b04881a28972468d70ce7b09f2662bc29e04a9a
-
SSDEEP
12288:jTK7ANgeRGT1Fe+eh+UotJf/NvsN908ycQZBNWki:XKkVGilotsNHyHBNJi
Score
10/10
Malware Config
Extracted
Family
strela
C2
94.159.113.86
Attributes
-
url_path
/server.php
Signatures
-
Detects Strela Stealer payload 3 IoCs
-
Strela family
-
Strela stealer
An info stealer targeting mail credentials first seen in late 2022.
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\d1035b1292e69800a7fc1772c57ec91c8cd2daeea1b00b8bb210cfed90b29299.dll,#11⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
140KB
-
Filesize
140KB
-
Filesize
140KB