Overview

overview

10

Static

static

3

12.dll

windows7-x64

10

12.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    12.dll.exe

  • Size

    156KB

  • Sample

    240708-ya81lsvfqq

  • MD5

    13d18430b3c12a39b6a6cf23da58d1ca

  • SHA1

    822e2ce575d764ad29a9e9dc2c40e07fa6bf8f87

  • SHA256

    735c1d83f5810b459b439a9950433bf270434f0090c88b2a976e261e6b658e4c

  • SHA512

    9af7895b1d7f52865da60786546a02dbd6b768a567f8c8796612f1e26ef2af7fc15b8327c849d82032a38d89efa61f4f886f7d6c1432eb4878d63be0f942dd99

  • SSDEEP

    3072:lzE7kvwWDnWJAAkcA3zd+xRQsmz1FtxSrWJjlg4qrn:RqkIWzWejkrQLFtYr/

Score
10/10
strelastealer

Malware Config

Extracted

Family

strela

C2

45.9.74.13

Attributes
  • url_path

    /server.php

  • user_agent

    Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537

Targets

    • Target

      12.dll.exe

    • Size

      156KB

    • MD5

      13d18430b3c12a39b6a6cf23da58d1ca

    • SHA1

      822e2ce575d764ad29a9e9dc2c40e07fa6bf8f87

    • SHA256

      735c1d83f5810b459b439a9950433bf270434f0090c88b2a976e261e6b658e4c

    • SHA512

      9af7895b1d7f52865da60786546a02dbd6b768a567f8c8796612f1e26ef2af7fc15b8327c849d82032a38d89efa61f4f886f7d6c1432eb4878d63be0f942dd99

    • SSDEEP

      3072:lzE7kvwWDnWJAAkcA3zd+xRQsmz1FtxSrWJjlg4qrn:RqkIWzWejkrQLFtYr/

    Score
    10/10
    strelastealer

    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

      stealerstrela
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks