Analysis

  • max time kernel
    15s
  • max time network
    17s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    20-12-2024 00:34

General

  • Target

    b04ab96e4474de55d33c61a6d6afcfcd0f6ce7c8221925a0c277723ec9220784N.dll

  • Size

    394KB

  • MD5

    7fd8389c38c0e8af73597de6248093e0

  • SHA1

    7a9da44cc2ecbdcd6bf0f461a96a6748620dcc8b

  • SHA256

    b04ab96e4474de55d33c61a6d6afcfcd0f6ce7c8221925a0c277723ec9220784

  • SHA512

    ee1340621e818d527bc8bed8314b453eb9f16669aa3e0ea53b84ded5527bd8547cc4a4ac7f809fc4709c1aceb93cec7f1790a4ad68d91946666770b3eac0b74e

  • SSDEEP

    12288:Q3CwdqnhEUzF1WXfe9cNnIncTRcq9CDFFiC8vE:ACwEnhE+F1h9oPPwF0CME

Score
10/10

Malware Config

Signatures

  • Detects Strela Stealer payload 3 IoCs
  • Strela family
  • Strela stealer

    An info stealer targeting mail credentials first seen in late 2022.

Processes

  • C:\Windows\system32\regsvr32.exe
    regsvr32 /s C:\Users\Admin\AppData\Local\Temp\b04ab96e4474de55d33c61a6d6afcfcd0f6ce7c8221925a0c277723ec9220784N.dll
    1⤵
      PID:880

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/880-1-0x0000000001DC0000-0x0000000001E20000-memory.dmp

      Filesize

      384KB

    • memory/880-0-0x0000000001DC0000-0x0000000001E20000-memory.dmp

      Filesize

      384KB

    • memory/880-2-0x0000000001DC0000-0x0000000001E20000-memory.dmp

      Filesize

      384KB