Overview

overview

10

Static

static

1

147981734725653.js

windows7-x64

10

147981734725653.js

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    30012024_1906_korgmore.zip

  • Size

    456KB

  • Sample

    240130-m7cswsefc5

  • MD5

    1b188160b1c00afa39b8b1092e3f2f5b

  • SHA1

    1d194a4d56db0eb515cf3d87feff3fcea5714e43

  • SHA256

    51fae6ff6a5f204c0255eb45782625d68d18df04cc6318cafa402b0e94766a74

  • SHA512

    2db44ec458d6ef3e280dda1038e56828a990b5f9b4d9f94612ea7dd3dc9ae50f0ec2d0b965ef0213a8744f7c6a899de204214dcd991d8b962bbf1646c5a51106

  • SSDEEP

    12288:don1iYrSH4ARq7rV4EUsRrw3k8U9Jvjpm:dobrCxA3VmsR18U9JvjA

Score
10/10
strelastealer

Malware Config

Targets

    • Target

      147981734725653.js

    • Size

      1.1MB

    • MD5

      f0aa642d6a0e4a0021bb5a006da8f659

    • SHA1

      6da83194b6e3acb7fa7537b179b96c0a21654983

    • SHA256

      7b513b60bf0c42e4dea6b545591088954a1ed63348d085cbeee97c03ef163a42

    • SHA512

      bd023360956eec5c06bd322d52d3881072955f6b22b9e99cdaf4f2a3f726d23e8bab0f3ab85d2bfaafbbfa5c696683026dbd50c7a5849e8aee893083662ae41e

    • SSDEEP

      12288:3lyp9BJQJzEk/e0clTeD1FUEnYC1b3XC4Ksl8iUVfloiMKQsKJlmgAzE27UKEZtl:olcDR666E/NSnGQbR3xGJZ3

    Score
    10/10
    strelastealer

    • Strela

      An info stealer targeting mail credentials first seen in late 2022.

      stealerstrela

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks