General

  • Target

    a9d07bb88d8d4d2b29ebdc061549a970N.exe

  • Size

    125KB

  • Sample

    240715-jk6kxaydjd

  • MD5

    a9d07bb88d8d4d2b29ebdc061549a970

  • SHA1

    a4c94b9f4846196553b0b3c26ea2050df1a5bb57

  • SHA256

    12436362c8acd27e8d7f93ed3e9339d20abe1cddd4cab4e843d8047705298181

  • SHA512

    021e431aba979379dd73794f1518fbf34011f6adc866b96644fb023c3064065c50d3ee93b605c148f53c9b832bb3e1574e108701752feb0903f8589b259cf756

  • SSDEEP

    3072:ksiPrYd6BBI1AAjzst2qWtS8zAxuRGTpaR1J4ZrEALR:sPrYsB+1djm2bs5awrlLR

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      a9d07bb88d8d4d2b29ebdc061549a970N.exe

    • Size

      125KB

    • MD5

      a9d07bb88d8d4d2b29ebdc061549a970

    • SHA1

      a4c94b9f4846196553b0b3c26ea2050df1a5bb57

    • SHA256

      12436362c8acd27e8d7f93ed3e9339d20abe1cddd4cab4e843d8047705298181

    • SHA512

      021e431aba979379dd73794f1518fbf34011f6adc866b96644fb023c3064065c50d3ee93b605c148f53c9b832bb3e1574e108701752feb0903f8589b259cf756

    • SSDEEP

      3072:ksiPrYd6BBI1AAjzst2qWtS8zAxuRGTpaR1J4ZrEALR:sPrYsB+1djm2bs5awrlLR

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks