General

  • Target

    c217bccf0dcc764f3b98d562c847d090N.exe

  • Size

    125KB

  • Sample

    240715-l63ggstfkg

  • MD5

    c217bccf0dcc764f3b98d562c847d090

  • SHA1

    4d7855064dc0b1bdc604e6c67bf38311df1acceb

  • SHA256

    a5753aad807b85ff99946e16347f1343633e89adce6dd6f80ecef32d26922dcc

  • SHA512

    bdd78af9cb8dfeed7f7fe205ee7c93ba3d3a4881b667fea2206dea429a03efb1e2a4f89316109aa31e4b06f1e6c842569fe2472260950e28a170ebffd7c1d0d6

  • SSDEEP

    3072:ZHHLDikEASvDUtRBE7I/ZQdM6RliPtJjz1IHRtVpE3:ZnLDofvIRimnz1I

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      c217bccf0dcc764f3b98d562c847d090N.exe

    • Size

      125KB

    • MD5

      c217bccf0dcc764f3b98d562c847d090

    • SHA1

      4d7855064dc0b1bdc604e6c67bf38311df1acceb

    • SHA256

      a5753aad807b85ff99946e16347f1343633e89adce6dd6f80ecef32d26922dcc

    • SHA512

      bdd78af9cb8dfeed7f7fe205ee7c93ba3d3a4881b667fea2206dea429a03efb1e2a4f89316109aa31e4b06f1e6c842569fe2472260950e28a170ebffd7c1d0d6

    • SSDEEP

      3072:ZHHLDikEASvDUtRBE7I/ZQdM6RliPtJjz1IHRtVpE3:ZnLDofvIRimnz1I

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks