Analysis
- max time kernel
94s - max time network
95s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
- submitted
10/11/2024, 14:34
General
- Target 466fc5be6f5ca4e2d2433cd2848dcfe881f6db26294ce3d5c65d64bf724085f4N.dll
- Size 562KB
- Sample241110-rxshtaydml
- SHA256 466fc5be6f5ca4e2d2433cd2848dcfe881f6db26294ce3d5c65d64bf724085f4
Score
10/10
Malware Config
Extracted
Family
-
strela
C2
-
94.159.113.86
Attributes
-
url_path
/server.php
Signatures
- Detects Strela Stealer payload 2 IoCs
- Strela family
- Strela stealer
An info stealer targeting mail credentials first seen in late 2022.
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\466fc5be6f5ca4e2d2433cd2848dcfe881f6db26294ce3d5c65d64bf724085f4N.dll,#11⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/760-1-0x0000026F1A720000-0x0000026F1A743000-memory.dmp
memory/760-3-0x0000026F1A720000-0x0000026F1A743000-memory.dmp