strela | 6c9f89f4afd46293cb781651ba982f61d3337dc57d51be0ad7b6d97741289331

Analysis

max time kernel
119s
max time network
17s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
22-12-2024 11:57

Target

6c9f89f4afd46293cb781651ba982f61d3337dc57d51be0ad7b6d97741289331N.dll
Size

419KB
MD5

3d0421ef766dd716ff5b348ded4cd470
SHA1

5fa225c64e71b88ff3b69500416f08d4d436edba
SHA256

6c9f89f4afd46293cb781651ba982f61d3337dc57d51be0ad7b6d97741289331
SHA512

e1d9d61ce7cedc41aff2564b4c42103bfd45fd314f49738f934572f9c3f94ebcadb6d179c4ae536ef0a88d1ec000ddd51bf77843c047697638c794f80fe5ea74
SSDEEP

6144:/LXt5fgsq5WFHRbi8wunhuAKDz0zbaLH5mnqdrcBnu++9ql7VlBhq0QYgUfB:/rt5fgMFxO8LxKDzbeqrcqqVVlBtQYf

Score

10^/10

strela stealer

Detects Strela Stealer payload 3 IoCs

resource	yara_rule
behavioral1/memory/2100-0-0x00000000001C0000-0x0000000000220000-memory.dmp	family_strela
behavioral1/memory/2100-1-0x00000000001C0000-0x0000000000220000-memory.dmp	family_strela
behavioral1/memory/2100-2-0x00000000001C0000-0x0000000000220000-memory.dmp	family_strela

Strela family
strela
Strela stealer
An info stealer targeting mail credentials first seen in late 2022.
stealer strela

C:\Windows\system32\regsvr32.exe
regsvr32 /s C:\Users\Admin\AppData\Local\Temp\6c9f89f4afd46293cb781651ba982f61d3337dc57d51be0ad7b6d97741289331N.dll
1⤵
PID:2100

memory/2100-0-0x00000000001C0000-0x0000000000220000-memory.dmp

Filesize
384KB

Download
memory/2100-1-0x00000000001C0000-0x0000000000220000-memory.dmp

Filesize
384KB

Download
memory/2100-2-0x00000000001C0000-0x0000000000220000-memory.dmp

Filesize
384KB

Download