General

  • Target

    3b412276fde794bc1ddc086be58b63d03ce5a9ff420a0d68b372c7248885f007

  • Size

    125KB

  • Sample

    240715-n53f7svhkl

  • MD5

    fb6b970872f8696afb02ec9a16609cd1

  • SHA1

    45121d6f9d571de25402450fea2c34ba1ccd4c9b

  • SHA256

    3b412276fde794bc1ddc086be58b63d03ce5a9ff420a0d68b372c7248885f007

  • SHA512

    4a9b8bdd5a60f8fb05c3e659f0ae3b070ff5f2c02e86eb7a129646efa107ed9d69999c68d88fe4735bc868dceb6f26de802dbcfac3c3c881b1c8370387309cef

  • SSDEEP

    3072:adwrvvgqmPxPobUcOQQJABiW8ZsfXmUu/T+N:adgvvuPW4jj/DZse/iN

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      3b412276fde794bc1ddc086be58b63d03ce5a9ff420a0d68b372c7248885f007

    • Size

      125KB

    • MD5

      fb6b970872f8696afb02ec9a16609cd1

    • SHA1

      45121d6f9d571de25402450fea2c34ba1ccd4c9b

    • SHA256

      3b412276fde794bc1ddc086be58b63d03ce5a9ff420a0d68b372c7248885f007

    • SHA512

      4a9b8bdd5a60f8fb05c3e659f0ae3b070ff5f2c02e86eb7a129646efa107ed9d69999c68d88fe4735bc868dceb6f26de802dbcfac3c3c881b1c8370387309cef

    • SSDEEP

      3072:adwrvvgqmPxPobUcOQQJABiW8ZsfXmUu/T+N:adgvvuPW4jj/DZse/iN

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks