General
- Target c1f655b11fb2b5160d255a630a19cfb265ddc6d6675a88c9e82006ad12cdfa7c
- Size 156KB
- Sample240710-e2d5rsydjc
- SHA256 c1f655b11fb2b5160d255a630a19cfb265ddc6d6675a88c9e82006ad12cdfa7c
- MD5 cbde5c2e7fe61c7ed382c157763545e8
- SHA1 faaaa521b7a6ac0c3f52c63b7ca094d09b841db4
- SHA512 094bb9f75a7405e9e9c0617356d3dc5eb4cfbb087630f161e5262fd404cb2ae024ea4bd04070203b1689e30000b5242a52d3f71aeb7f95130e228574503ac8a4
- SSDEEP 3072:IyDGvI2ZNtbeRMNOIyXsYTjNcjNWpiFdGclL+RTU51BP8R/yt9mH2a6r3:3avI2ZbbRgIyclWpGrL+A1BERqbmWr
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
c1f655b11fb2b5160d255a630a19cfb265ddc6d6675a88c9e82006ad12cdfa7c.dll
Resource
win7-20240708-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
strela
C2
-
45.9.74.13
Attributes
-
url_path
/server.php
-
user_agent
Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537
Targets
-
- Target c1f655b11fb2b5160d255a630a19cfb265ddc6d6675a88c9e82006ad12cdfa7c
- Size 156KB
- SHA256 c1f655b11fb2b5160d255a630a19cfb265ddc6d6675a88c9e82006ad12cdfa7c
- MD5 cbde5c2e7fe61c7ed382c157763545e8
- SHA1 faaaa521b7a6ac0c3f52c63b7ca094d09b841db4
- SHA512 094bb9f75a7405e9e9c0617356d3dc5eb4cfbb087630f161e5262fd404cb2ae024ea4bd04070203b1689e30000b5242a52d3f71aeb7f95130e228574503ac8a4
- SSDEEP 3072:IyDGvI2ZNtbeRMNOIyXsYTjNcjNWpiFdGclL+RTU51BP8R/yt9mH2a6r3:3avI2ZbbRgIyclWpGrL+A1BERqbmWr
- MD5 SHA1 SHA512 SSDEEP
-
Detects Strela Stealer payload