Analysis
- max time kernel
95s - max time network
137s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
15/11/2024, 02:09
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
10eca3e3c748a5f090f8c4d339e9ad2afd079ddfc91770b0a541ac08af8d424f.dll
Resource
win7-20240903-en
3 signatures
150 seconds
General
- Target 10eca3e3c748a5f090f8c4d339e9ad2afd079ddfc91770b0a541ac08af8d424f.dll
- Size 137KB
- Sample241115-cll5bsxarg
- SHA256 10eca3e3c748a5f090f8c4d339e9ad2afd079ddfc91770b0a541ac08af8d424f
- MD5 be41de6f5fd775b52dc3cea545cd79fe
- SHA1 9730a761e9f8fcb96c0f17ce155096d52b7ab57b
- SHA512 bf0dda95118af87d612466234f89cec6ff72df5365b8b3de9f571971938d0d6bb9025399a322488ab1dcdb49443362554317d90bb5b26415c67048f340895d84
- SSDEEP 3072:WMo+GzxyvWkaKAl0xez7l5CHHleM607B76GA8AvrnE:Wf1zxyNaK40495CnC5GNerE
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Extracted
Family
-
strela
C2
-
94.159.113.79
Attributes
-
url_path
/up.php
Signatures
- Detects Strela Stealer payload 2 IoCs
resource yara_rule behavioral2/memory/1608-1-0x0000000002650000-0x0000000002673000-memory.dmp family_strela behavioral2/memory/1608-2-0x0000000002650000-0x0000000002673000-memory.dmp family_strela - Strela family