Overview

overview

10

Static

static

1

DOC117482996.js

windows7-x64

10

DOC117482996.js

windows10-1703-x64

10

DOC117482996.js

windows10-2004-x64

10

Resubmissions

13/07/2023, 08:36

230713-kh21dafh5510

13/07/2023, 06:53

230713-hnt6lsff5510

Sharing

Copy URL Twitter E-mail

General

  • Target
    DOC117482996.js
  • Size 1.7MB
  • Sample230713-hnt6lsff55
  • SHA256 6ef79b0d87df8031acaa5f7302001fca22f908619f1c887ce70539050c3235ce
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
strelastealer

Malware Config

Extracted

Family

  • strela

C2

  • 91.215.85.209

Targets

    • Target
      DOC117482996.js
    • Size 1.7MB
    • SHA256 6ef79b0d87df8031acaa5f7302001fca22f908619f1c887ce70539050c3235ce
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    strelastealer

    • Strela

      An info stealer targeting mail credentials first seen in late 2022.

      stealerstrela

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    behavioral1behavioral2behavioral3

MITRE ATT&CK Enterprise v6

Tasks