Analysis
- max time kernel
148s - max time network
152s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
25/11/2024, 02:39
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
85dccf69b7fc24cf39f6d3821e963905005993a5036cbfbf6412dde5558df2bd.dll
Resource
win7-20241023-en
3 signatures
150 seconds
General
- Target 85dccf69b7fc24cf39f6d3821e963905005993a5036cbfbf6412dde5558df2bd.dll
- Size 134KB
- Sample241125-c49ncazlen
- SHA256 85dccf69b7fc24cf39f6d3821e963905005993a5036cbfbf6412dde5558df2bd
- MD5 ceea2771acee3957189b502f5e1b607d
- SHA1 ac79d2f79f00dcbf0116ab8b7268069927258549
- SHA512 e33754db175b5367d74937ce634ea8ec043f469fdf53d2c7721605486f1ddf826633d8c7fdb1ba127b83adeed308b4f64493d584ca295c3f0cf206a83c8deea1
- SSDEEP 3072:+aFwDl+lMbh3Gm8CsqMRV9t5P7GpQuBMSlFhpvTPIaGWiME2MKK+HfK2u1Ep0xtO:+a2l+EGm8TTP7utJhIaR5ERjfb
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Extracted
Family
-
strela
C2
-
94.159.113.79
Attributes
-
url_path
/up.php
Signatures
- Detects Strela Stealer payload 2 IoCs
resource yara_rule behavioral2/memory/5084-0-0x0000000002A30000-0x0000000002A53000-memory.dmp family_strela behavioral2/memory/5084-1-0x0000000002A30000-0x0000000002A53000-memory.dmp family_strela - Strela family