General

  • Target

    9a6ded9b5de231935845e7530d614fc9dd2e11e4fb041dbe377f2a8dd80aea9b

  • Size

    123KB

  • Sample

    240715-n565dsyaqc

  • MD5

    56cd51e2cf67b3c3894572262231eb6f

  • SHA1

    c7101893dc7e5690575d0fe2abbd012f8b322598

  • SHA256

    9a6ded9b5de231935845e7530d614fc9dd2e11e4fb041dbe377f2a8dd80aea9b

  • SHA512

    82ee150034221a56e2851122265b581be4cacf5f548e046cad7547f991489d5c0421201470091d701892fa3f14a811bf47ae6c7fadefcef051660e4af6296dd9

  • SSDEEP

    3072:lcsyTzkHrrWaGL3suD/YgzlGgZL/5IigUS0Qx:lcULqt3sfg/juigUS0C

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      9a6ded9b5de231935845e7530d614fc9dd2e11e4fb041dbe377f2a8dd80aea9b

    • Size

      123KB

    • MD5

      56cd51e2cf67b3c3894572262231eb6f

    • SHA1

      c7101893dc7e5690575d0fe2abbd012f8b322598

    • SHA256

      9a6ded9b5de231935845e7530d614fc9dd2e11e4fb041dbe377f2a8dd80aea9b

    • SHA512

      82ee150034221a56e2851122265b581be4cacf5f548e046cad7547f991489d5c0421201470091d701892fa3f14a811bf47ae6c7fadefcef051660e4af6296dd9

    • SSDEEP

      3072:lcsyTzkHrrWaGL3suD/YgzlGgZL/5IigUS0Qx:lcULqt3sfg/juigUS0C

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks