strela | e9270e85b4b083b12cba9570e1aab12ed0d164feb57fd08ceabb13f561a17586

Analysis

max time kernel
77s
max time network
17s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
20-12-2024 05:55

Target

e9270e85b4b083b12cba9570e1aab12ed0d164feb57fd08ceabb13f561a17586N.dll
Size

388KB
MD5

e636e004016e47f286d34ac853d8ca40
SHA1

659d39a544c6c72b8358e2f1cae2ba228ce04831
SHA256

e9270e85b4b083b12cba9570e1aab12ed0d164feb57fd08ceabb13f561a17586
SHA512

27e45bb852158a040ae197010a442f8eededf611ca0d7711cf482045d7e2300503eab50251d0fd4178498fa07db07e8ae4bd85bf7d9c6e6a8b33e2193d5be4e6
SSDEEP

12288:HWQ+k+OoFxO8LxKDzbeqrcqqVVlBtQYf:H+kl4xHL4beqrcqyt

Score

10^/10

strela stealer

Detects Strela Stealer payload 3 IoCs

resource	yara_rule
behavioral1/memory/2360-0-0x00000000001C0000-0x0000000000220000-memory.dmp	family_strela
behavioral1/memory/2360-1-0x00000000001C0000-0x0000000000220000-memory.dmp	family_strela
behavioral1/memory/2360-2-0x00000000001C0000-0x0000000000220000-memory.dmp	family_strela

Strela family
strela
Strela stealer
An info stealer targeting mail credentials first seen in late 2022.
stealer strela

C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\e9270e85b4b083b12cba9570e1aab12ed0d164feb57fd08ceabb13f561a17586N.dll
1⤵
PID:2360

memory/2360-0-0x00000000001C0000-0x0000000000220000-memory.dmp

Filesize
384KB

Download
memory/2360-1-0x00000000001C0000-0x0000000000220000-memory.dmp

Filesize
384KB

Download
memory/2360-2-0x00000000001C0000-0x0000000000220000-memory.dmp

Filesize
384KB

Download