General

  • Target

    bf6c18ea091fcefafc0ce32ff05b8cf8f49184e2af5a38c4041b7af8a266f959

  • Size

    123KB

  • Sample

    240715-n57qxsyard

  • MD5

    8e338dd3c8aae7ed559fe7675f6ec611

  • SHA1

    573f7c10446bb242ec5355c523c37ae1cd590ba7

  • SHA256

    bf6c18ea091fcefafc0ce32ff05b8cf8f49184e2af5a38c4041b7af8a266f959

  • SHA512

    ace3c7959a590769d18aa116d2cb25393bd64a1b4525f7cd99a130105fdd6351dd24a90561f40693c9f91bf67f048aa15f48f05ff34b7edd5f29d030ae1f3ed9

  • SSDEEP

    3072:9WQIOOiKa8vyEu1mYF4Yowf4lwPfw+od2Zh9LQO27cE:95IBTE4Yvnlod2Zh9Lw7c

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      bf6c18ea091fcefafc0ce32ff05b8cf8f49184e2af5a38c4041b7af8a266f959

    • Size

      123KB

    • MD5

      8e338dd3c8aae7ed559fe7675f6ec611

    • SHA1

      573f7c10446bb242ec5355c523c37ae1cd590ba7

    • SHA256

      bf6c18ea091fcefafc0ce32ff05b8cf8f49184e2af5a38c4041b7af8a266f959

    • SHA512

      ace3c7959a590769d18aa116d2cb25393bd64a1b4525f7cd99a130105fdd6351dd24a90561f40693c9f91bf67f048aa15f48f05ff34b7edd5f29d030ae1f3ed9

    • SSDEEP

      3072:9WQIOOiKa8vyEu1mYF4Yowf4lwPfw+od2Zh9LQO27cE:95IBTE4Yvnlod2Zh9Lw7c

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks