General

  • Target

    1f78df22579bc0b2308bb7a0a6646540N.exe

  • Size

    123KB

  • Sample

    240715-2g3zqasfmn

  • MD5

    1f78df22579bc0b2308bb7a0a6646540

  • SHA1

    1369ff128880ea184fa6286a4788149b256cab3c

  • SHA256

    5e2c95888329b458cc010255e52ddfdee02ddbdac073e9c74befc5cb6f37e84a

  • SHA512

    b5240b976bfc3ba819c65936d6587fcc859ff8af734dc254333ef61202abd5f1032e8c382c8e00258b7babb53c1756e59a3de74f32e4c8a8c6e68aba7a6e2411

  • SSDEEP

    3072:+saldIV5Ky3U7QHoOA0kHe+8Be8yTNWG3WFnnr:+scdOsKi0kHezyTNWGmZr

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      1f78df22579bc0b2308bb7a0a6646540N.exe

    • Size

      123KB

    • MD5

      1f78df22579bc0b2308bb7a0a6646540

    • SHA1

      1369ff128880ea184fa6286a4788149b256cab3c

    • SHA256

      5e2c95888329b458cc010255e52ddfdee02ddbdac073e9c74befc5cb6f37e84a

    • SHA512

      b5240b976bfc3ba819c65936d6587fcc859ff8af734dc254333ef61202abd5f1032e8c382c8e00258b7babb53c1756e59a3de74f32e4c8a8c6e68aba7a6e2411

    • SSDEEP

      3072:+saldIV5Ky3U7QHoOA0kHe+8Be8yTNWG3WFnnr:+scdOsKi0kHezyTNWGmZr

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks