General

  • Target

    7da7bc2988c3a61472c1a822a4523b40N.exe

  • Size

    213KB

  • Sample

    240715-ew441azhjd

  • MD5

    7da7bc2988c3a61472c1a822a4523b40

  • SHA1

    dc4b4c190e11c43a7455c2e5c9286f9ffa42ec9d

  • SHA256

    cec002c9906846aaaa35a522c56ed487c5999fc38481077f33380f4d83363c03

  • SHA512

    60ddc4da03dc18eb34892a559c53ac21f4ac6ec03c7d951eb2ff6b0bbb3dcf32c1e7fa239cba16c17da9a6411059ea9d18eef76a4c67b9268665294c7b15995a

  • SSDEEP

    3072:T1tCrNiVuV1bz6l3W9dUltaVGQy7Gli6dKfNpyLwMr0l8r06is/TUB:T1M3BzY3WDeaXKf7yLzp06LUB

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.176

Attributes
  • url_path

    /server.php

  • user_agent

    Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537

Targets

    • Target

      7da7bc2988c3a61472c1a822a4523b40N.exe

    • Size

      213KB

    • MD5

      7da7bc2988c3a61472c1a822a4523b40

    • SHA1

      dc4b4c190e11c43a7455c2e5c9286f9ffa42ec9d

    • SHA256

      cec002c9906846aaaa35a522c56ed487c5999fc38481077f33380f4d83363c03

    • SHA512

      60ddc4da03dc18eb34892a559c53ac21f4ac6ec03c7d951eb2ff6b0bbb3dcf32c1e7fa239cba16c17da9a6411059ea9d18eef76a4c67b9268665294c7b15995a

    • SSDEEP

      3072:T1tCrNiVuV1bz6l3W9dUltaVGQy7Gli6dKfNpyLwMr0l8r06is/TUB:T1M3BzY3WDeaXKf7yLzp06LUB

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks