General

  • Target

    48f02cdff6c686f033d11fce9bd12220N.exe

  • Size

    123KB

  • Sample

    240715-ajwjwaygjp

  • MD5

    48f02cdff6c686f033d11fce9bd12220

  • SHA1

    f315cb294604813e0fd4c0570d2d4a34b88a857a

  • SHA256

    782ec8f9d339ff60fd082ffc40f72994a6beb7ee8523ce6751c0aa61e849e00f

  • SHA512

    2dd55002801c173f193da82eeea56ff81170012544187dcd1451f5fc9b7702a94c642847ae9ae6c532e7b3273bd537b2a56e7712fb2c28462fd9ff60fca85eef

  • SSDEEP

    3072:T5JWX/Smv/GJDNVwgkp9mciYJF8Uz1mBRrTVY6smiMa:t8PSmv/sDNOgk5iYvOK

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      48f02cdff6c686f033d11fce9bd12220N.exe

    • Size

      123KB

    • MD5

      48f02cdff6c686f033d11fce9bd12220

    • SHA1

      f315cb294604813e0fd4c0570d2d4a34b88a857a

    • SHA256

      782ec8f9d339ff60fd082ffc40f72994a6beb7ee8523ce6751c0aa61e849e00f

    • SHA512

      2dd55002801c173f193da82eeea56ff81170012544187dcd1451f5fc9b7702a94c642847ae9ae6c532e7b3273bd537b2a56e7712fb2c28462fd9ff60fca85eef

    • SSDEEP

      3072:T5JWX/Smv/GJDNVwgkp9mciYJF8Uz1mBRrTVY6smiMa:t8PSmv/sDNOgk5iYvOK

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks