Resubmissions

12/04/2023, 07:24

230412-h8elnacc4s 10

23/01/2023, 17:47

230123-wdcepsga5y 10

General

  • Target

    x.dll

  • Size

    618KB

  • Sample

    230412-h8elnacc4s

  • MD5

    57ec0f7cf124d1ae3b73e643a6ac1dad

  • SHA1

    213c548e0a5e3fefe37bb857f0f6e3230d29675c

  • SHA256

    8b0d8651e035fcc91c39b3260c871342d1652c97b37c86f07a561828b652e907

  • SHA512

    e6116ace287aa8ece6a70a516dad7026b719431dc7944c25021df85b47b7cb77bcd5098c1fded6b96295a6aaac6471b4be1deffec8991cbbbadcc8f08b693b82

  • SSDEEP

    12288:bjmmcqPiokJeOweuSQRHJEI2dLBFXkH+MBL:bamcDoOweuRRbc3keMBL

Score
10/10

Malware Config

Extracted

Family

Strela

C2

193.106.191.166

Targets

    • Target

      x.dll

    • Size

      618KB

    • MD5

      57ec0f7cf124d1ae3b73e643a6ac1dad

    • SHA1

      213c548e0a5e3fefe37bb857f0f6e3230d29675c

    • SHA256

      8b0d8651e035fcc91c39b3260c871342d1652c97b37c86f07a561828b652e907

    • SHA512

      e6116ace287aa8ece6a70a516dad7026b719431dc7944c25021df85b47b7cb77bcd5098c1fded6b96295a6aaac6471b4be1deffec8991cbbbadcc8f08b693b82

    • SSDEEP

      12288:bjmmcqPiokJeOweuSQRHJEI2dLBFXkH+MBL:bamcDoOweuRRbc3keMBL

    Score
    7/10
    • Reads user/profile data of local email clients

      Email clients store some user data on disk where infostealers will often target it.

MITRE ATT&CK Enterprise v6

Tasks