General

  • Target

    1e070f48e7c6413c8eacd69d8f0d96d0N.exe

  • Size

    123KB

  • Sample

    240715-2cs9qavdpg

  • MD5

    1e070f48e7c6413c8eacd69d8f0d96d0

  • SHA1

    50d4dc89adcc735c1cd73055d8f4be1bf7832fa4

  • SHA256

    5fa87e15e950192a91d7a28b39c53b5f15e3e553e8f2b0c5b72615578f07179e

  • SHA512

    d5ea99fe1ca9b632f454fee970bb7f80bc697fed3273e91d6fa67c7a78a6e8de9adb6e7e091962cdec6f972868c5b3267a0d5f6b449d94a54a648253f5493184

  • SSDEEP

    3072:8Y5fKu+TcMnx2iP9eZ8S8ZG/ucFmY1taT1uX3RaVm:p8JiPFmQkhi

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      1e070f48e7c6413c8eacd69d8f0d96d0N.exe

    • Size

      123KB

    • MD5

      1e070f48e7c6413c8eacd69d8f0d96d0

    • SHA1

      50d4dc89adcc735c1cd73055d8f4be1bf7832fa4

    • SHA256

      5fa87e15e950192a91d7a28b39c53b5f15e3e553e8f2b0c5b72615578f07179e

    • SHA512

      d5ea99fe1ca9b632f454fee970bb7f80bc697fed3273e91d6fa67c7a78a6e8de9adb6e7e091962cdec6f972868c5b3267a0d5f6b449d94a54a648253f5493184

    • SSDEEP

      3072:8Y5fKu+TcMnx2iP9eZ8S8ZG/ucFmY1taT1uX3RaVm:p8JiPFmQkhi

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks