Analysis
-
max time kernel
122s -
max time network
128s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
17-11-2024 10:07
General
-
Target
1f5cb13d5975df13afd669d7bacf587808a484501b8215b3b98181381a3dc951.dll
-
Size
480KB
-
MD5
8c643f0da7dc47490fabdb813e6b9163
-
SHA1
b1e46ec46f0c49c3547c9d703db03226ed2db3bc
-
SHA256
1f5cb13d5975df13afd669d7bacf587808a484501b8215b3b98181381a3dc951
-
SHA512
bbee03be8485f720f8f6756d8cc40124474caee1ee2fbb75d1fa9cc00c5658b008b233a0a7df1bcc446f19969d8eb840021a4b55aef368ee290e8beed90cbb22
-
SSDEEP
12288:o1NLBCDgdCp6p9QxWnMdXtwhgfLc0WKEPeg:sNcDgDOxWGwhgTcn2
Score
10/10
Malware Config
Extracted
Family
strela
C2
94.159.113.82
Attributes
-
url_path
/server.php
Signatures
-
Detects Strela Stealer payload 2 IoCs
-
Strela family
-
Strela stealer
An info stealer targeting mail credentials first seen in late 2022.
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\1f5cb13d5975df13afd669d7bacf587808a484501b8215b3b98181381a3dc951.dll,#11⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
140KB
-
Filesize
140KB