Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
20-12-2024 01:31
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
73f709dcca4da48bb6a54ed740b9ae1bc8682acfa9b78194767a07c06cecfca3.dll
Resource
win7-20240903-en
windows7-x64
3 signatures
150 seconds
General
-
Target
73f709dcca4da48bb6a54ed740b9ae1bc8682acfa9b78194767a07c06cecfca3.dll
-
Size
394KB
-
MD5
e85102e57cf5e1e9ac393e31dfb5a11e
-
SHA1
19a86bfebaa77419960dabad581655efa31e7df4
-
SHA256
73f709dcca4da48bb6a54ed740b9ae1bc8682acfa9b78194767a07c06cecfca3
-
SHA512
f3576815e82bb6b6d5c4374ae86052afe4a7db6d628a8bec56d59293cd80434434db9785ac364bed00aa66ad67d9f4da0bbd7edafa360096f03bf58d75c91b75
-
SSDEEP
6144:b/mwcFHRbi8wunhuAKDz0zbaLH5mnqdrcBnu++9ql7VlBhq0QYgUfB:b/mwcFxO8LxKDzbeqrcqqVVlBtQYf
Malware Config
Signatures
-
Detects Strela Stealer payload 3 IoCs
resource yara_rule behavioral2/memory/404-1-0x00000000022F0000-0x0000000002350000-memory.dmp family_strela behavioral2/memory/404-0-0x00000000022F0000-0x0000000002350000-memory.dmp family_strela behavioral2/memory/404-2-0x00000000022F0000-0x0000000002350000-memory.dmp family_strela -
Strela family