Overview

overview

10

Static

static

3

0135682cf1...0N.dll

windows7-x64

10

0135682cf1...0N.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0135682cf18fd685e28fc046fcae8500N.exe

  • Size

    213KB

  • Sample

    240714-pv1ejazhqj

  • MD5

    0135682cf18fd685e28fc046fcae8500

  • SHA1

    2d45a44b8c2b56d9e86cc7c952a6c5ab55139b29

  • SHA256

    86879c96df0e208c0ce116477324d485b24d1590485d5bc1fbe94c88c6857b67

  • SHA512

    eaadbaf9b49d1e1125cbf36df092490e2c0c0da313e65b1bd59985e5e36c513e6fcda3b0497e861dacc111458ca5d9b80f59a895b4bda8a797075914912ed787

  • SSDEEP

    3072:RK6mzHyYiB7NHFM6weLG1jSJdwfyY0dhA3RI4RsFRI+CiszAUB:Rmmjn95a0JdaZLBI4qRI0UB

Score
10/10
strelastealer

Malware Config

Extracted

Family

strela

C2

45.9.74.176

Attributes
  • url_path

    /server.php

  • user_agent

    Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537

Targets

    • Target

      0135682cf18fd685e28fc046fcae8500N.exe

    • Size

      213KB

    • MD5

      0135682cf18fd685e28fc046fcae8500

    • SHA1

      2d45a44b8c2b56d9e86cc7c952a6c5ab55139b29

    • SHA256

      86879c96df0e208c0ce116477324d485b24d1590485d5bc1fbe94c88c6857b67

    • SHA512

      eaadbaf9b49d1e1125cbf36df092490e2c0c0da313e65b1bd59985e5e36c513e6fcda3b0497e861dacc111458ca5d9b80f59a895b4bda8a797075914912ed787

    • SSDEEP

      3072:RK6mzHyYiB7NHFM6weLG1jSJdwfyY0dhA3RI4RsFRI+CiszAUB:Rmmjn95a0JdaZLBI4qRI0UB

    Score
    10/10
    strelastealer

    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

      stealerstrela
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks