General

  • Target

    2fdcf14627f3e6a51898477896c7c180N.exe

  • Size

    124KB

  • Sample

    240715-3tsvysxhkd

  • MD5

    2fdcf14627f3e6a51898477896c7c180

  • SHA1

    35a44293d869aba60f765b632b8f5a65f867e111

  • SHA256

    b66e73a2822106674c8c029e324777a844df01f2d93bc6db064e482c98a09f5e

  • SHA512

    47e3c563b695ae8a89ee36080da5095c513bd9f8d178e117ecd73a18575db8835b802ac26feac631be0eb7305f1c58bf3c0a46e7539b93f47479d43a43a9abe0

  • SSDEEP

    3072:/U0gIa38rdVllRxlekBL9oKMIGsoMwlH/ZAehmimt:EL0Zt96IGaMF7

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      2fdcf14627f3e6a51898477896c7c180N.exe

    • Size

      124KB

    • MD5

      2fdcf14627f3e6a51898477896c7c180

    • SHA1

      35a44293d869aba60f765b632b8f5a65f867e111

    • SHA256

      b66e73a2822106674c8c029e324777a844df01f2d93bc6db064e482c98a09f5e

    • SHA512

      47e3c563b695ae8a89ee36080da5095c513bd9f8d178e117ecd73a18575db8835b802ac26feac631be0eb7305f1c58bf3c0a46e7539b93f47479d43a43a9abe0

    • SSDEEP

      3072:/U0gIa38rdVllRxlekBL9oKMIGsoMwlH/ZAehmimt:EL0Zt96IGaMF7

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks