Analysis

  • max time kernel
    93s
  • max time network
    98s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    20-12-2024 04:01

General

  • Target

    e60faca65249fcede16b5d0e3205769069d552d1a1a4bb58d3a72f9239e62409N.dll

  • Size

    404KB

  • MD5

    c34422a9ec9aa8e7339f207455a92120

  • SHA1

    896b2a33cb9e7f5ba2aafa5a3b4f620bc00ac143

  • SHA256

    e60faca65249fcede16b5d0e3205769069d552d1a1a4bb58d3a72f9239e62409

  • SHA512

    90444a697b20c9283a3c4fb06b7ae12354ae20e6bde7435f035a49d994e751156a688abe786dd17a219f1b4c9602fc49a208c98e72c8d30f2d50792bc04eef9a

  • SSDEEP

    12288:FFmShLvqaBFxO8LxKDzbeqrcqqVVlBtQYf:XmSt3xHL4beqrcqyt

Score
10/10

Malware Config

Signatures

  • Detects Strela Stealer payload 3 IoCs
  • Strela family
  • Strela stealer

    An info stealer targeting mail credentials first seen in late 2022.

Processes

  • C:\Windows\system32\regsvr32.exe
    regsvr32 /s C:\Users\Admin\AppData\Local\Temp\e60faca65249fcede16b5d0e3205769069d552d1a1a4bb58d3a72f9239e62409N.dll
    1⤵
      PID:2244

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2244-1-0x0000000001370000-0x00000000013D0000-memory.dmp

      Filesize

      384KB

    • memory/2244-0-0x0000000001370000-0x00000000013D0000-memory.dmp

      Filesize

      384KB

    • memory/2244-2-0x0000000001370000-0x00000000013D0000-memory.dmp

      Filesize

      384KB