Overview

overview

10

Static

static

3

virus3020.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    virus3020.exe

  • Size

    254KB

  • Sample

    240220-1ewl7afb7x

  • MD5

    fc96be0f7221f385c68ce7a04d4f1d45

  • SHA1

    8bd28f041a63d1e034e84d5adaeadbfdb66372bf

  • SHA256

    10f76b6dd69c2a5d64de3d72a4403c462dd728794b888cdfabb8ee84e93b81af

  • SHA512

    33d9cd489549f11f4b39285447acef3d941f5d0a121b702f41a7e7771bcefe1071a2c88d21edd16efc529770c7a86a016ee1daa2d5888dca14884e48e3656b86

  • SSDEEP

    3072:ueW0bX5eTix9maU+GfiBdE6/NTDM86MHu9uiLmseoTcBqf+26L/StkezOUB:fbX5e2RUBfiBX/dM3vuccof+3UB

Score
10/10
strelaspywarestealer

Malware Config

Targets

    • Target

      virus3020.exe

    • Size

      254KB

    • MD5

      fc96be0f7221f385c68ce7a04d4f1d45

    • SHA1

      8bd28f041a63d1e034e84d5adaeadbfdb66372bf

    • SHA256

      10f76b6dd69c2a5d64de3d72a4403c462dd728794b888cdfabb8ee84e93b81af

    • SHA512

      33d9cd489549f11f4b39285447acef3d941f5d0a121b702f41a7e7771bcefe1071a2c88d21edd16efc529770c7a86a016ee1daa2d5888dca14884e48e3656b86

    • SSDEEP

      3072:ueW0bX5eTix9maU+GfiBdE6/NTDM86MHu9uiLmseoTcBqf+26L/StkezOUB:fbX5e2RUBfiBX/dM3vuccof+3UB

    Score
    10/10
    strelaspywarestealer

    • Strela

      An info stealer targeting mail credentials first seen in late 2022.

      stealerstrela

    • Reads user/profile data of local email clients

      Email clients store some user data on disk where infostealers will often target it.

      spywarestealer
    behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

1
T1552

Credentials In Files

1
T1552.001

Discovery

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks