Analysis
-
max time kernel
93s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
24-11-2024 07:30
General
-
Target
ceea2771acee3957189b502f5e1b607d.dll
-
Size
134KB
-
MD5
ceea2771acee3957189b502f5e1b607d
-
SHA1
ac79d2f79f00dcbf0116ab8b7268069927258549
-
SHA256
85dccf69b7fc24cf39f6d3821e963905005993a5036cbfbf6412dde5558df2bd
-
SHA512
e33754db175b5367d74937ce634ea8ec043f469fdf53d2c7721605486f1ddf826633d8c7fdb1ba127b83adeed308b4f64493d584ca295c3f0cf206a83c8deea1
-
SSDEEP
3072:+aFwDl+lMbh3Gm8CsqMRV9t5P7GpQuBMSlFhpvTPIaGWiME2MKK+HfK2u1Ep0xtO:+a2l+EGm8TTP7utJhIaR5ERjfb
Score
10/10
Malware Config
Extracted
Family
strela
C2
94.159.113.79
Attributes
-
url_path
/up.php
Signatures
-
Detects Strela Stealer payload 4 IoCs
-
Strela family
-
Strela stealer
An info stealer targeting mail credentials first seen in late 2022.
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\ceea2771acee3957189b502f5e1b607d.dll1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
140KB
-
Filesize
140KB
-
Filesize
140KB
-
Filesize
140KB