General

  • Target

    1be9fbe20ef071f2be7a38c6f4885f40N.exe

  • Size

    124KB

  • Sample

    240715-17d8lsvbpg

  • MD5

    1be9fbe20ef071f2be7a38c6f4885f40

  • SHA1

    13df398a954ff1ed2d847200dd5e49c0ce9cb8bd

  • SHA256

    b49ac8505af5a70ad64408a59573b3e557e7333d46295c5a4718db95611e1492

  • SHA512

    35aab851cb36dc01703ce2fc93f2f9a5c4b162f3209f77e3ab793147816b47793e76ba68750fc64e98b12328f6d7488d5be50b8a4ac4b15d321199a961c1b280

  • SSDEEP

    3072:F00bDjduQO9+aiNORKSrYsSi0fLJb6XbHcL/S:60bfApviNORKe2i0TobHcG

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      1be9fbe20ef071f2be7a38c6f4885f40N.exe

    • Size

      124KB

    • MD5

      1be9fbe20ef071f2be7a38c6f4885f40

    • SHA1

      13df398a954ff1ed2d847200dd5e49c0ce9cb8bd

    • SHA256

      b49ac8505af5a70ad64408a59573b3e557e7333d46295c5a4718db95611e1492

    • SHA512

      35aab851cb36dc01703ce2fc93f2f9a5c4b162f3209f77e3ab793147816b47793e76ba68750fc64e98b12328f6d7488d5be50b8a4ac4b15d321199a961c1b280

    • SSDEEP

      3072:F00bDjduQO9+aiNORKSrYsSi0fLJb6XbHcL/S:60bfApviNORKe2i0TobHcG

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks