General

  • Target

    3e6d554d2b06f191e511be10e4985140N.exe

  • Size

    125KB

  • Sample

    240714-3fxa8axdjj

  • MD5

    3e6d554d2b06f191e511be10e4985140

  • SHA1

    688ef70a2edc3461f597c5f4a33f4d8a183fcbb5

  • SHA256

    013907f20d73b4dbe6a8f83000ad5b1c1a1025acdd6ff9e6d04fb0a466840fd4

  • SHA512

    a02edec0a7f6e67d13bf5003be389554a4cb1e3fb3435488b2166b224ae7a38b56e1323b642359832d1ed5475a67aef261ee7d0e707caf050124b417094557d3

  • SSDEEP

    3072:GzG85Xr3EmzXLRLqKb+DilVK71yj7LPnwP:GBQYLxp68fXL/w

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      3e6d554d2b06f191e511be10e4985140N.exe

    • Size

      125KB

    • MD5

      3e6d554d2b06f191e511be10e4985140

    • SHA1

      688ef70a2edc3461f597c5f4a33f4d8a183fcbb5

    • SHA256

      013907f20d73b4dbe6a8f83000ad5b1c1a1025acdd6ff9e6d04fb0a466840fd4

    • SHA512

      a02edec0a7f6e67d13bf5003be389554a4cb1e3fb3435488b2166b224ae7a38b56e1323b642359832d1ed5475a67aef261ee7d0e707caf050124b417094557d3

    • SSDEEP

      3072:GzG85Xr3EmzXLRLqKb+DilVK71yj7LPnwP:GBQYLxp68fXL/w

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks