Analysis
-
max time kernel
117s -
max time network
117s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
04-02-2025 22:51
General
-
Target
870acc691b29e3540cbdfff1c1f99d785a2c39920ab8dc692152b00ba81283b1.dll
-
Size
174KB
-
MD5
260f9174f1f4e51b52d88669a18a439a
-
SHA1
dfaef9c1b986f3292418c9f66b82bf33315537a9
-
SHA256
870acc691b29e3540cbdfff1c1f99d785a2c39920ab8dc692152b00ba81283b1
-
SHA512
e31c51d0b300e32da5e449f24f7dede4300f9ace1e25fdb79f5f68a536cb8b484912385047d840455d9f36d34d2f2789e499a125b5139c130b3bdd5b312165cc
-
SSDEEP
3072:PmrC0+bi8Y21IB1yx7ASxbgmTntSDkXcHAqdqWATKN8zWAE5zY7:P/0+bix21wO7AVmD2IcHzJATKmCzO
Score
10/10
Malware Config
Extracted
Family
strela
C2
91.215.85.209
Attributes
-
url_path
/server.php
-
user_agent
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537
Signatures
-
Detects Strela Stealer payload 3 IoCs
-
Strela family
-
Strela stealer
An info stealer targeting mail credentials first seen in late 2022.
Processes
-
C:\Windows\system32\rundll32.exerundll32.exe C:\Users\Admin\AppData\Local\Temp\870acc691b29e3540cbdfff1c1f99d785a2c39920ab8dc692152b00ba81283b1.dll,#11⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
132KB
-
Filesize
228KB
-
Filesize
132KB