General

  • Target

    168943149b8d2c5f27fc971b2a9125c0N.exe

  • Size

    123KB

  • Sample

    240715-1sd93atdqb

  • MD5

    168943149b8d2c5f27fc971b2a9125c0

  • SHA1

    f3d6b4f11efd7ea025b68d5f474b275fdbc83f09

  • SHA256

    636a1dcb1faaf9a6bba14b0375ebfbe32715759790029e34587dd4c2d7ecec1d

  • SHA512

    000822d55aa5e6b06e19ae7e0501bf2268ba3fcb779ba42da7369d17a0110a4f3b1e28d3324607aac472d6a4ad586bf8cb9385eaa360a2ccb83b7b67e0a0fdbc

  • SSDEEP

    3072:4BuB7HL6DXPsbHv4137gz+sdKCj1hj4BLRyOFWEwrk/:4Be6zPavKIrhgLjWj

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      168943149b8d2c5f27fc971b2a9125c0N.exe

    • Size

      123KB

    • MD5

      168943149b8d2c5f27fc971b2a9125c0

    • SHA1

      f3d6b4f11efd7ea025b68d5f474b275fdbc83f09

    • SHA256

      636a1dcb1faaf9a6bba14b0375ebfbe32715759790029e34587dd4c2d7ecec1d

    • SHA512

      000822d55aa5e6b06e19ae7e0501bf2268ba3fcb779ba42da7369d17a0110a4f3b1e28d3324607aac472d6a4ad586bf8cb9385eaa360a2ccb83b7b67e0a0fdbc

    • SSDEEP

      3072:4BuB7HL6DXPsbHv4137gz+sdKCj1hj4BLRyOFWEwrk/:4Be6zPavKIrhgLjWj

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks