General

  • Target

    2076bc4bb57ee7b4e4a91310f8d14890N.exe

  • Size

    123KB

  • Sample

    240715-2lc9vssgnq

  • MD5

    2076bc4bb57ee7b4e4a91310f8d14890

  • SHA1

    5d494f8bcfe2f09edc751181907a774fb05fffa6

  • SHA256

    2d913c9a9e8391ed3bb7394587a6b891e7eb4d8473c24952f0c6a6c5b16d5e36

  • SHA512

    f7bbd9051d4bb890d97cf7ca3713d8c9e79b9ed0e36a615c55bb60bf22e1d7b2178f0d5045a22cbbcf17def20fb5c15dcbfefb9dd06c28778e21c98aa882837e

  • SSDEEP

    3072:LZx4fbesaM8CsWppETmrcaQdysX9rPUY2l1TQ1MvNDTtPTSj:Mis58ZWppGIsXXi1TQetPW

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      2076bc4bb57ee7b4e4a91310f8d14890N.exe

    • Size

      123KB

    • MD5

      2076bc4bb57ee7b4e4a91310f8d14890

    • SHA1

      5d494f8bcfe2f09edc751181907a774fb05fffa6

    • SHA256

      2d913c9a9e8391ed3bb7394587a6b891e7eb4d8473c24952f0c6a6c5b16d5e36

    • SHA512

      f7bbd9051d4bb890d97cf7ca3713d8c9e79b9ed0e36a615c55bb60bf22e1d7b2178f0d5045a22cbbcf17def20fb5c15dcbfefb9dd06c28778e21c98aa882837e

    • SSDEEP

      3072:LZx4fbesaM8CsWppETmrcaQdysX9rPUY2l1TQ1MvNDTtPTSj:Mis58ZWppGIsXXi1TQetPW

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks