General

  • Target

    912145d0b2da842de072b50781151978d5eaa55cf44e8b5850bc0f492a1832bd

  • Size

    125KB

  • Sample

    240715-n56tmayaqb

  • MD5

    95d2895dbab4859b620df9053bdb2af3

  • SHA1

    0884590dc5b9808a95bc368d9e7b55eb945910fd

  • SHA256

    912145d0b2da842de072b50781151978d5eaa55cf44e8b5850bc0f492a1832bd

  • SHA512

    5ea320c51ef99931b547b0630b0098601ab5014dc14449e71df4903d969ff5da725cb392bac57aa01e96ebb45d537ee476e52464addb7ce50efbe6e72ccfa6b0

  • SSDEEP

    3072:hYDo5yUAJ80lEeUf50VB/CAiuDjIUxb+lLZf7qmBN:ODoxAqZKnCAih2b+lLZ1D

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      912145d0b2da842de072b50781151978d5eaa55cf44e8b5850bc0f492a1832bd

    • Size

      125KB

    • MD5

      95d2895dbab4859b620df9053bdb2af3

    • SHA1

      0884590dc5b9808a95bc368d9e7b55eb945910fd

    • SHA256

      912145d0b2da842de072b50781151978d5eaa55cf44e8b5850bc0f492a1832bd

    • SHA512

      5ea320c51ef99931b547b0630b0098601ab5014dc14449e71df4903d969ff5da725cb392bac57aa01e96ebb45d537ee476e52464addb7ce50efbe6e72ccfa6b0

    • SSDEEP

      3072:hYDo5yUAJ80lEeUf50VB/CAiuDjIUxb+lLZf7qmBN:ODoxAqZKnCAih2b+lLZ1D

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks