General

  • Target

    20eeea43e3854940843c5baf4cc51c70N.exe

  • Size

    122KB

  • Sample

    240715-2mqatashjm

  • MD5

    20eeea43e3854940843c5baf4cc51c70

  • SHA1

    09bdaad73cb05efbf769ca22baf3b73ca9d1aeed

  • SHA256

    bd35326b78f97bd5076e94d6550935e50ad01ebb445d7bdbbba0b6aede5ef893

  • SHA512

    bb039c3d73bc0d57fa0b87e2c43f5d0d9aee6c3238a59fc330863f67f6ad9b94028be4055883b79851e9ae61345469a7d9b88a6bcb9460eaa29aebcd2c168e08

  • SSDEEP

    3072:X7ZdjClRl5P/F130J66YddeNVbwqHWl1igWlabXlOV2oT4N:X7rgl9d1+pYddgVLHABWlm1OV2o8N

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      20eeea43e3854940843c5baf4cc51c70N.exe

    • Size

      122KB

    • MD5

      20eeea43e3854940843c5baf4cc51c70

    • SHA1

      09bdaad73cb05efbf769ca22baf3b73ca9d1aeed

    • SHA256

      bd35326b78f97bd5076e94d6550935e50ad01ebb445d7bdbbba0b6aede5ef893

    • SHA512

      bb039c3d73bc0d57fa0b87e2c43f5d0d9aee6c3238a59fc330863f67f6ad9b94028be4055883b79851e9ae61345469a7d9b88a6bcb9460eaa29aebcd2c168e08

    • SSDEEP

      3072:X7ZdjClRl5P/F130J66YddeNVbwqHWl1igWlabXlOV2oT4N:X7rgl9d1+pYddgVLHABWlm1OV2o8N

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks