Analysis
-
max time kernel
95s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
13-12-2024 03:08
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
d1a35f2cf986a3a03ef87ce0c4c1ca13b27a79d2d4975f1658bf7c6156fda7af.dll
Resource
win7-20240903-en
windows7-x64
3 signatures
150 seconds
General
-
Target
d1a35f2cf986a3a03ef87ce0c4c1ca13b27a79d2d4975f1658bf7c6156fda7af.dll
-
Size
471KB
-
MD5
4b8d572f4d087b931c6304b70208bcd3
-
SHA1
38a68c6e555b53417c600df03cc65135b4c01d24
-
SHA256
d1a35f2cf986a3a03ef87ce0c4c1ca13b27a79d2d4975f1658bf7c6156fda7af
-
SHA512
c3129e3c7a54c764379fbe375a541eea1d4f1abd06f9d0c7b00b4eb30b9eeddff1df05bb7f7306acc4de9058690e5c24edd0996cd4efd78e61bc0f0de547b925
-
SSDEEP
6144:zcxtNN004tMwwyYZEDGDW0Fh6aRDmpXxBtGqDnojj1MlwjBnxh+0GPTPZmV0Jyu9:aN/+MwOqDg6hphXNEVZjB/RoLMV3xZH
Malware Config
Signatures
-
Detects Strela Stealer payload 3 IoCs
resource yara_rule behavioral2/memory/2840-1-0x0000000002880000-0x00000000028F4000-memory.dmp family_strela behavioral2/memory/2840-2-0x0000000002880000-0x00000000028F4000-memory.dmp family_strela behavioral2/memory/2840-3-0x0000000002880000-0x00000000028F4000-memory.dmp family_strela -
Strela family