General
- Target 875ccb8933e29fdbf9d430f040f86600d9717bea18a2aaf9e044b95d1a63368b.exe
- Size 155KB
- Sample240709-b76v7azelq
- SHA256 875ccb8933e29fdbf9d430f040f86600d9717bea18a2aaf9e044b95d1a63368b
- MD5 793007f03f0ab1d86cb1c564eb8ebd41
- SHA1 594daecefb7c5ca57b3b9c16c01cde5891de2cd1
- SHA512 73853ef4f121afaee3bce4c86d804c888963344f295b06193c97980816b5159deca834e01b16551cf727cbca1addf13702609f7cb207b9d6ad2e298f0d38dd33
- SSDEEP 3072:8TVMXQpm+dBeHbSllnNjByODgKlHnZvEX5li3mLImW9ETLClEkypwynXdrT:GVMXZAqbK/j1Em58X5li3O2EqlEVpLh
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
875ccb8933e29fdbf9d430f040f86600d9717bea18a2aaf9e044b95d1a63368b.dll
Resource
win7-20240708-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
strela
C2
-
45.9.74.13
Attributes
-
url_path
/server.php
-
user_agent
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537
Targets
-
- Target 875ccb8933e29fdbf9d430f040f86600d9717bea18a2aaf9e044b95d1a63368b.exe
- Size 155KB
- SHA256 875ccb8933e29fdbf9d430f040f86600d9717bea18a2aaf9e044b95d1a63368b
- MD5 793007f03f0ab1d86cb1c564eb8ebd41
- SHA1 594daecefb7c5ca57b3b9c16c01cde5891de2cd1
- SHA512 73853ef4f121afaee3bce4c86d804c888963344f295b06193c97980816b5159deca834e01b16551cf727cbca1addf13702609f7cb207b9d6ad2e298f0d38dd33
- SSDEEP 3072:8TVMXQpm+dBeHbSllnNjByODgKlHnZvEX5li3mLImW9ETLClEkypwynXdrT:GVMXZAqbK/j1Em58X5li3O2EqlEVpLh
- MD5 SHA1 SHA512 SSDEEP
-
Detects Strela Stealer payload