Analysis
- max time kernel
141s - max time network
149s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
24/11/2024, 07:27
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ceea2771acee3957189b502f5e1b607d.dll
Resource
win7-20241023-en
3 signatures
150 seconds
General
- Target ceea2771acee3957189b502f5e1b607d.dll
- Size 134KB
- Sample241124-h94beawldm
- SHA256 85dccf69b7fc24cf39f6d3821e963905005993a5036cbfbf6412dde5558df2bd
- MD5 ceea2771acee3957189b502f5e1b607d
- SHA1 ac79d2f79f00dcbf0116ab8b7268069927258549
- SHA512 e33754db175b5367d74937ce634ea8ec043f469fdf53d2c7721605486f1ddf826633d8c7fdb1ba127b83adeed308b4f64493d584ca295c3f0cf206a83c8deea1
- SSDEEP 3072:+aFwDl+lMbh3Gm8CsqMRV9t5P7GpQuBMSlFhpvTPIaGWiME2MKK+HfK2u1Ep0xtO:+a2l+EGm8TTP7utJhIaR5ERjfb
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Extracted
Family
-
strela
C2
-
94.159.113.79
Attributes
-
url_path
/up.php
Signatures
- Detects Strela Stealer payload 3 IoCs
resource yara_rule behavioral2/memory/4316-1-0x0000000000820000-0x0000000000843000-memory.dmp family_strela behavioral2/memory/4316-2-0x0000000000820000-0x0000000000843000-memory.dmp family_strela behavioral2/memory/4316-3-0x0000000000820000-0x0000000000843000-memory.dmp family_strela - Strela family