General

  • Target

    29617404e7dd2cc4bf508a26c7bf8260N.exe

  • Size

    124KB

  • Sample

    240715-3ar5bawhqf

  • MD5

    29617404e7dd2cc4bf508a26c7bf8260

  • SHA1

    1d7a59faf39e895b8d16d31166b6189dc5c3f094

  • SHA256

    d658df46208550130a3abb7e9129c4e5b240a29e544f894e98548788c0acc7bc

  • SHA512

    0335860da32959fd01d6eebdaf2c441498ca4a48a98c2f41796fbb1352fc045395a6019cc32524d7d64f989306e162a94368a5915d8529babd9aeebe5d74d679

  • SSDEEP

    1536:DYp9qn4H2DxshJ+iEt5bTvcUyzWgWtw5q2WnX2nv1Q2QSkp5YJuS18EXBlrzQq:DIs4H2DJtZvQzuw0RX29hVAYJuSTxlX

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      29617404e7dd2cc4bf508a26c7bf8260N.exe

    • Size

      124KB

    • MD5

      29617404e7dd2cc4bf508a26c7bf8260

    • SHA1

      1d7a59faf39e895b8d16d31166b6189dc5c3f094

    • SHA256

      d658df46208550130a3abb7e9129c4e5b240a29e544f894e98548788c0acc7bc

    • SHA512

      0335860da32959fd01d6eebdaf2c441498ca4a48a98c2f41796fbb1352fc045395a6019cc32524d7d64f989306e162a94368a5915d8529babd9aeebe5d74d679

    • SSDEEP

      1536:DYp9qn4H2DxshJ+iEt5bTvcUyzWgWtw5q2WnX2nv1Q2QSkp5YJuS18EXBlrzQq:DIs4H2DJtZvQzuw0RX29hVAYJuSTxlX

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks