Overview

overview

10

Static

static

3

f4cd2b75e7...f1.dll

windows7-x64

10

f4cd2b75e7...f1.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f4cd2b75e7cfb7f05d2f618875e67ec695ebc01e40c6469579b25cf5bbc2acf1

  • Size

    328KB

  • Sample

    240711-kae6msxgnj

  • MD5

    1174cc31ae39231bd22fc9795f12e676

  • SHA1

    16bb3e9ecb7c7a6e1b5d15e5a89e2aa8afe60a26

  • SHA256

    f4cd2b75e7cfb7f05d2f618875e67ec695ebc01e40c6469579b25cf5bbc2acf1

  • SHA512

    c2bb2c451e0a8aae2cf279145a40590e230c3c8fbc91b8fa51ea34075f4728d01d0e7030307a1e61cbdce7ad346c8e2a8074c5f109977cd0bb5393d1b66e49c1

  • SSDEEP

    6144:brCSOobIu0jGjcj0aTlHolTt24Hq3F6oCsYn9xo2+phSQSc:brCtj860aqlTt24HARYvvwhSPc

Score
10/10
strelastealer

Malware Config

Extracted

Family

strela

C2

45.9.74.13

Attributes
  • url_path

    /server.php

  • user_agent

    Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537

Targets

    • Target

      f4cd2b75e7cfb7f05d2f618875e67ec695ebc01e40c6469579b25cf5bbc2acf1

    • Size

      328KB

    • MD5

      1174cc31ae39231bd22fc9795f12e676

    • SHA1

      16bb3e9ecb7c7a6e1b5d15e5a89e2aa8afe60a26

    • SHA256

      f4cd2b75e7cfb7f05d2f618875e67ec695ebc01e40c6469579b25cf5bbc2acf1

    • SHA512

      c2bb2c451e0a8aae2cf279145a40590e230c3c8fbc91b8fa51ea34075f4728d01d0e7030307a1e61cbdce7ad346c8e2a8074c5f109977cd0bb5393d1b66e49c1

    • SSDEEP

      6144:brCSOobIu0jGjcj0aTlHolTt24Hq3F6oCsYn9xo2+phSQSc:brCtj860aqlTt24HARYvvwhSPc

    Score
    10/10
    strelastealer

    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

      stealerstrela
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks