Analysis
- max time kernel
94s - max time network
153s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
- submitted
25/11/2024, 02:21
General
- Target 410cbc2d187ca80ce22eadb4fbe77d5af071bc7c9f747f50e2ddf765167ba7d4.dll
- Size 139KB
- Sample241125-cs9h7synem
- SHA256 410cbc2d187ca80ce22eadb4fbe77d5af071bc7c9f747f50e2ddf765167ba7d4
Score
10/10
Malware Config
Extracted
Family
-
strela
C2
-
94.159.113.79
Attributes
-
url_path
/up.php
Signatures
- Detects Strela Stealer payload 3 IoCs
- Strela family
- Strela stealer
An info stealer targeting mail credentials first seen in late 2022.
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s C:\Users\Admin\AppData\Local\Temp\410cbc2d187ca80ce22eadb4fbe77d5af071bc7c9f747f50e2ddf765167ba7d4.dll1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1064-0-0x00000000014F0000-0x0000000001513000-memory.dmp
memory/1064-1-0x00000000014F0000-0x0000000001513000-memory.dmp
memory/1064-2-0x00000000014F0000-0x0000000001513000-memory.dmp