strela | bfe7803857dcf6a2b8eef074d0205dd365e9bdab322fc4c5ffdefe7d81b999a9

Sharing

Copy URL Twitter E-mail

General

Target
45.9.74.32 Strela DLLs 10.zip
Size 39.0MB
Sample240712-qsdcnavgrp
SHA256 bfe7803857dcf6a2b8eef074d0205dd365e9bdab322fc4c5ffdefe7d81b999a9
MD5 c8d0f61e97e865ad398fbf1f99eec674
SHA1 9084569f22fe967a9743acebaf5a5ba5aad538f1
SHA512 6323c793904f30c74cd76a1e96a90074917226d56428d91540b7acfdbb21c546ff07bc578e0ae1cd80d44b49e6670eafa47b36d5cba3b882c7496c5755ac4991
SSDEEP 786432:0g2cvnu39mvIJRhw9oeE2Q95Vz/rxIvDUFfvuVMcP7x82r1cVi6f3eoezWzqG6l+:FzqEIJR+or22kvDc2yczx8McffXeiqGl
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

strela stealer

Malware Config

Extracted

Family

strela

45.9.74.32

Attributes

url_path
/out.php
user_agent
Mozilla/4.0 (compatible)

Targets

- Target
  4500.dll
- Size 123KB
- SHA256 fc4b3d43b29b9e73add9457541ee9193772228cb687bd63ccc30c230ca70a5fa
- MD5 7691d0a8653b51ffbef2e583160c9769
- SHA1 2ab53d253c7c0e9650163eb505a62bfbd757f748
- SHA512 0ec319b6ab694e9afbbd327dfefdc81a1705f35cde5c0b225f46abf7c4c6520d517b34ddbe16845467d7f584a00d9211a825e6df501830fe7bf5f5d005c63ed8
- SSDEEP 3072:IsPyclKcFfgGmF6Dn45yvYpWH3dN4scJZqAh6u2PLynKAS:IGrIGQ6Dn4yTosC1T2PuNS
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

strela stealer
- Detects Strela Stealer payload
- Strela stealer
  An info stealer targeting mail credentials first seen in late 2022.
  stealer strela
behavioral1 behavioral2
- Target
  4501.dll
- Size 124KB
- SHA256 fc58645ec326bbd67bdc48331873f6e9484883df84ea0b2aded641b36ceb68ce
- MD5 961d7bf59cf1bfc63adba1eed1734cef
- SHA1 11c9977a1a7277f3726fa39c36607fbb5d199b28
- SHA512 e2c127c62145d6d5c1c4e01047f85a93a9bb3f1d458f6e66ff5cb1d5268e0cd6edaf6b2587ef5d9ec132ccaf21ecce18b7367fd4d0c66bf4130dde3cecf2e505
- SSDEEP 3072:JZ8f/+aqq2Bkqc36sukxYHkfmUVkCZtDzI94J43s:AGXq5KsesmaZtr
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

strela stealer
- Detects Strela Stealer payload
- Strela stealer
  An info stealer targeting mail credentials first seen in late 2022.
  stealer strela
behavioral3 behavioral4
- Target
  4502.dll
- Size 123KB
- SHA256 e5b3a6846df0f3c2fda868a05bfd202be429cba1d5c13e51d91b4f2cc6cf33db
- MD5 d7691ce559bc32a653009e8ef4d653a2
- SHA1 014c82c6a9f87bc3fb63137d19e84336bea9f599
- SHA512 ac5f50967571173c7db369d7179a52d0aaa7f05cfc69bbaffd1c2736a1fa6bbfa81bf3d9f2aefbf8c13140306c3760fc7121ac5734589aff7c9e38381e5c2df3
- SSDEEP 3072:qbLNmYCXZ8y3JyZuZGoXUOHUjflVQs7i1t7JHIY2EIH/Wi:+NmYCXTygjUO+os7ilIRH+i
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

strela stealer
- Detects Strela Stealer payload
- Strela stealer
  An info stealer targeting mail credentials first seen in late 2022.
  stealer strela
behavioral5 behavioral6
- Target
  4503.dll
- Size 125KB
- SHA256 4fd17bd7a31564491c68cf7ce1a305d09fb9de9c755eab72100e3e46a5406f8f
- MD5 6cc6959918142fadbcd03735770ebc92
- SHA1 5a7ab342daa02f3bbab8707882a535fe0d51896a
- SHA512 23b786f299a746ff972043f0b4a05a6ea4d0ace107812b2fb576f07cb01e146358eb16d2f12c60796e9ac8d8539a1d1f11a1c6bd67b32e86f0ceca85f7b4a2d8
- SSDEEP 3072:fRfPCI/Y4S4JPBoQQ/Ak/7XWbdidu4tt1aBNh:fhCI/aqP+/ARbdxwE
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

strela stealer
- Detects Strela Stealer payload
- Strela stealer
  An info stealer targeting mail credentials first seen in late 2022.
  stealer strela
behavioral7 behavioral8
- Target
  4504.dll
- Size 125KB
- SHA256 360907cc346aedc96c973ff325841f8a298727e3518b7e92b10582aa26b79547
- MD5 5bcba38236ef15877b72f9029cb54265
- SHA1 d3502abd1510701a230a6e4f52b83445a1f88c87
- SHA512 0ca3bedd5183b23018af43fa715d95a21314d67db5a4bcb0945dba85490f537aa8d987e721fc44f630ef7c02f07f95bfd4ebe87e08a89d41607669d266de6d14
- SSDEEP 3072:tseK5rv8lkOpDy5S1TexK0OKxgbtV+dVJ0mjZ18b:+35rv8eiD8S1Th9btK0qa
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

strela stealer
- Detects Strela Stealer payload
- Strela stealer
  An info stealer targeting mail credentials first seen in late 2022.
  stealer strela
behavioral10 behavioral9
- Target
  4505.dll
- Size 124KB
- SHA256 1b696740d2c34fc311cde95f7f4a47867e8ec88a601cc551f55c54581956ce05
- MD5 547251dc3996df99dc20bc355c69c2eb
- SHA1 41b39f1b3c6708b3d6516ebb0300fe0a0b4fbadb
- SHA512 391729c13727d5d22ebe46fdfc742bc45fa6a908ac449352afebdc96198beca63c1a7e3ca340be8e86732191e6cd111b664cb91cb80d44b43fa849de0d494a59
- SSDEEP 3072:zernVvyrcZp4f1RqBJmiHcNBM8j9nigggPe:SrnhZpu1UBJ1cc8RnigP
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

strela stealer
- Detects Strela Stealer payload
- Strela stealer
  An info stealer targeting mail credentials first seen in late 2022.
  stealer strela
behavioral11 behavioral12
- Target
  4506.dll
- Size 124KB
- SHA256 d34c97674447020dc6b894a2c44b901600e7e1e3338ccf651d4be96455714b61
- MD5 335d73bfecbf5f8fb22d9b27bd0b5479
- SHA1 ab34d6f235188e3167badeb0abc4060efdb294c9
- SHA512 50109a0454ba6c4caddf0df078f5cee2a8a397e620058dda3c643880616a4b2b079804c8ffe207a70da23831a0fa943193f526c47960559ed99742eb3f57f6bc
- SSDEEP 3072:UE9tk6wx/GtRTbk79728r+9yjGCsxHRo1neZNbDvmhi:UE7k9/Grbk75ry96GCsLoqbK
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

strela stealer
- Detects Strela Stealer payload
- Strela stealer
  An info stealer targeting mail credentials first seen in late 2022.
  stealer strela
behavioral13 behavioral14
- Target
  4507.dll
- Size 125KB
- SHA256 e4b55005def164a09e62c5c26a6fdace1b7b64e27be167663ccbc0f376e5e3ee
- MD5 e3b5f9bca082bb6cef56bdff3ee0664e
- SHA1 3d6ed1024b6e770e8ba753143ea6364faed8e3f1
- SHA512 170b6d9540d4e555d6c20e6d8454ee4871947a79b5aead45896d84b70503e11f7a3234515f5822d671c9e9f7f5daad575e4cdbd9405b8f7ebf4a14895ff2e27e
- SSDEEP 3072:+rai25V/RBJtPQajHrN/0bp46TF5BLxdWW:+Wi2j/nJtPNbrN/Y46T
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

strela stealer
- Detects Strela Stealer payload
- Strela stealer
  An info stealer targeting mail credentials first seen in late 2022.
  stealer strela
behavioral15 behavioral16
- Target
  4508.dll
- Size 123KB
- SHA256 5ab5d6260337c19e277c4c9f2264e1a19ee208f5ea31dbf84a974b49493563ba
- MD5 555040aaa6c9221386c8399c7c2651da
- SHA1 3b7d39c907219852102a1e57010dec98c8d35b60
- SHA512 c6a7c16c645aee12b2575b952addf45833a2d23d891ff85aa77d929980f018015b1eae76e77d393949d948a8d6a5afadafd0e95e3076c54096a958b51036cda2
- SSDEEP 1536:vRZ6PE8tfY79/VxiJPTMX6UYhWOQ90fevlf9zV5ZWCi1ag3bSWNvQ3dPDSj+1qCO:vic8xyHobaTYhJotSaWbSWNw9ciTlx6
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

strela stealer
- Detects Strela Stealer payload
- Strela stealer
  An info stealer targeting mail credentials first seen in late 2022.
  stealer strela
behavioral17 behavioral18
- Target
  4509.dll
- Size 122KB
- SHA256 ad6014d50861201c19e96c1c36c11f044201408f3df73878080b404e823758e4
- MD5 58502ef300e8c7b7d9caa089b56edcd7
- SHA1 4112629225bd08e021fa144a3cddf1e6c5cd7547
- SHA512 d351250c99eb1c56d0a548fd1510fa844b543f86f750a0c2ff27de721f02ba99a274f7b7835019a8170c0e9e06125e710a8d82c2231c5b70c52e522449f1e455
- SSDEEP 3072:sSGU9XvVvIhY/VgoX+psZP1Zs8a4cTF3zupDrYulyAcG3JpL32J4J:sihVvIaBuKZP48xaF3zuZYulTcMpL32i
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

strela stealer
- Detects Strela Stealer payload
- Strela stealer
  An info stealer targeting mail credentials first seen in late 2022.
  stealer strela
behavioral19 behavioral20
- Target
  4510.dll
- Size 124KB
- SHA256 0f5fff205f997a646b8a182e6b1b437e9f9890fdbdd6042ff44e4926a81cf03c
- MD5 52fd3f96986db1f6bb5c149d6743c5de
- SHA1 af6ef8d1ada3aa16379fb69ab5db9fcd66216c1d
- SHA512 623ab908cab8602566e04d2135e6f3512a89d3e9ebe3b4679e30bb649282d9ed90829346fee0cb18666e621781c01adc079c34576461b4c1ac3de01efcdba8d5
- SSDEEP 3072:0uVDnygLtKcRMmqomxwTPIz7sr6Xv9tUmnCH7mnXA:0PgLxn9Pi86XvzU
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

strela stealer
- Detects Strela Stealer payload
- Strela stealer
  An info stealer targeting mail credentials first seen in late 2022.
  stealer strela
behavioral21 behavioral22
- Target
  4511.dll
- Size 124KB
- SHA256 2f4a3e880ed9bcc9758a0aec5ee033ebbcf11dd0472bc1144f7594f473974916
- MD5 275266f88be559b2f39fabac9ce77632
- SHA1 15c9bede16cbe922e50f5bee8efa6f6790c280dc
- SHA512 2c7a5813b75826e047dce3ea7a2214834397190952e475ce35f97938b9af0f4920aaf5c88e94ab420fb405eac80241311ad0f76aed28c7bfc0e3f689c2aece68
- SSDEEP 1536:yXbcZGzVjkjJMU0i9lRBjkkXUXVQtByawWqoz9EwrGhGkR4ncJBtPqcK95IN5LfX:y/Fm44LkkXWIIaPqoOwiNRv7qc7Rs
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

strela stealer
- Detects Strela Stealer payload
- Strela stealer
  An info stealer targeting mail credentials first seen in late 2022.
  stealer strela
behavioral23 behavioral24
- Target
  4512.dll
- Size 123KB
- SHA256 bbfa077c9de282dfe330b43aa3c4883c8217beff75b83795d5021870503869aa
- MD5 2710cde86cd65be948feb2b060bfdc7c
- SHA1 d93099b5e3fb3a3d723a5461fad77bde42598ede
- SHA512 56689dd6f75d8a364778cac73305381a44bacc299d22f95772c559523fe4510466ac22de34668eaf7b19d9483e935800375980114a32cdacb499e4df9fa9d204
- SSDEEP 3072:tJKoQb2RuPMKe9dhXpyjSMCyLd2HFfxVQFoKAd/a3:CoQWAGh5ECydcZSTgC
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

strela stealer
- Detects Strela Stealer payload
- Strela stealer
  An info stealer targeting mail credentials first seen in late 2022.
  stealer strela
behavioral25 behavioral26
- Target
  4513.dll
- Size 125KB
- SHA256 f287ad5c20bb3b75636aded9d8431f4eea43c85cd0d74ad719d84fb033caf57e
- MD5 245d77f0eda60e98fc71ea66969f666c
- SHA1 f9833c014488cc90f363211467c060eb31a97d2c
- SHA512 89ec5c7b8dde21c82fae74e2844899d0a6a46159592c9499cae79b38675b6cb074660d4b06f7065f14374c1078915baf0d2868ff50aa06de24bbf75fb058e0da
- SSDEEP 3072:ttfmz5KS7f7IOLXMLxVPx39iVMwHq+Rcmd:PfmnQOLAVP5QVMwK9md
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

strela stealer
- Detects Strela Stealer payload
- Strela stealer
  An info stealer targeting mail credentials first seen in late 2022.
  stealer strela
behavioral27 behavioral28
- Target
  4514.dll
- Size 123KB
- SHA256 3a6e47a3699ee4f5a5d747dc53486a4c5ec959f195121f398946278a6543217e
- MD5 91ed08819c3e640ad660b3d7841bd846
- SHA1 f30ff1d5c5b9af223de088bd9ce0d0bf9dc8f3f4
- SHA512 9facb90e7505f3811736c02915cc99aa2fd1cdeabccb74dec6b3f304072037fee79995dc935bd7bb299997ba939f6c5ac65b9ed0ab4c22d6de1a822881e2da79
- SSDEEP 3072:OOt4UmJFlQ/CCFB1JvssiLsCuqemSf0al1m47bv1/5D:1t4UmJfpCFBrkYZCalpPx
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

strela stealer
- Detects Strela Stealer payload
- Strela stealer
  An info stealer targeting mail credentials first seen in late 2022.
  stealer strela
behavioral29 behavioral30
- Target
  4515.dll
- Size 122KB
- SHA256 4839fef165a25d3dbd917eb276cde70ed3628ecca078de89497d76c72b7d116e
- MD5 6922b40165284d482e155394577f1e6d
- SHA1 ef870d98916f1a0899bfea4cd62a5b1fdb0675a1
- SHA512 bb88b270d1497397434edc13f3de10239f5cccdd196c816e5c9990804e1af89e9dc3afd8e1f027e720f4475405f154ee96bbcaf7862ba37d56c08e69141ffaec
- SSDEEP 3072:Wyeu7qKPJI6+d/287ewvi2skYC7u+ajzm:GH96+Z2879vi2c+aj
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

strela stealer
- Detects Strela Stealer payload
- Strela stealer
  An info stealer targeting mail credentials first seen in late 2022.
  stealer strela
behavioral31 behavioral32

MITRE ATT&CK Matrix

Tasks

Sharing

General

Malware Config

Extracted

Targets

Detects Strela Stealer payload

Strela stealer

Detects Strela Stealer payload

Strela stealer

Detects Strela Stealer payload

Strela stealer

Detects Strela Stealer payload

Strela stealer

Detects Strela Stealer payload

Strela stealer

Detects Strela Stealer payload

Strela stealer

Detects Strela Stealer payload

Strela stealer

Detects Strela Stealer payload

Strela stealer

Detects Strela Stealer payload

Strela stealer

Detects Strela Stealer payload

Strela stealer

Detects Strela Stealer payload

Strela stealer

Detects Strela Stealer payload

Strela stealer

Detects Strela Stealer payload

Strela stealer

Detects Strela Stealer payload

Strela stealer

Detects Strela Stealer payload

Strela stealer

Detects Strela Stealer payload

Strela stealer

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32