General

  • Target

    5f7f206aa6bce8300ee86c11f5fbc2e0N.exe

  • Size

    125KB

  • Sample

    240715-cg2dfsshlp

  • MD5

    5f7f206aa6bce8300ee86c11f5fbc2e0

  • SHA1

    9024ebc6ce0933a5de442ead2f66664697415d1e

  • SHA256

    49b9d2d7fd358a09ecd0c9706bd5ced830a998460362495c45f3434d9706fda2

  • SHA512

    a275a59c84230523b5103089311f5294b4f58124a0c46d28f50455852edc47f89c4cdd1b7488af0e711e92b606113647b41be5135d9aaed2a48dde274b3667ca

  • SSDEEP

    3072:cXA7lPfvoWRpcQOVMzsI0REnvn4cVBHxwfCH6q2weTY:ca1vxRpSVEsEv4cVFxwKH5eTY

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      5f7f206aa6bce8300ee86c11f5fbc2e0N.exe

    • Size

      125KB

    • MD5

      5f7f206aa6bce8300ee86c11f5fbc2e0

    • SHA1

      9024ebc6ce0933a5de442ead2f66664697415d1e

    • SHA256

      49b9d2d7fd358a09ecd0c9706bd5ced830a998460362495c45f3434d9706fda2

    • SHA512

      a275a59c84230523b5103089311f5294b4f58124a0c46d28f50455852edc47f89c4cdd1b7488af0e711e92b606113647b41be5135d9aaed2a48dde274b3667ca

    • SSDEEP

      3072:cXA7lPfvoWRpcQOVMzsI0REnvn4cVBHxwfCH6q2weTY:ca1vxRpSVEsEv4cVFxwKH5eTY

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks