General

  • Target

    dd817eaebb5b2f5f5aa0c43952b56446cdf55800738490d89bce572f5c1721e6

  • Size

    123KB

  • Sample

    240715-n57qxsyarf

  • MD5

    da05016c4fedef7dc4933b9a2723c3c7

  • SHA1

    d7ffad8e859efd9944368c963c0c2654babaded0

  • SHA256

    dd817eaebb5b2f5f5aa0c43952b56446cdf55800738490d89bce572f5c1721e6

  • SHA512

    289941633799d79d7d8e54e9602fd4be325d3eb6e703859ceeb4728c002cc1ffa574627468f20666c3338caf7ef281c6bab08324b5bfddc808a66863df5e7a21

  • SSDEEP

    1536:x5zXWLYmuANb2AjR9gQ0TSQwHUF1QhIi7g4/M7bh6DQg6qQVMsdiREj3gc2YBkWg:NCnN9SSQw0FWz7n/IbTQREIiNtvW

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      dd817eaebb5b2f5f5aa0c43952b56446cdf55800738490d89bce572f5c1721e6

    • Size

      123KB

    • MD5

      da05016c4fedef7dc4933b9a2723c3c7

    • SHA1

      d7ffad8e859efd9944368c963c0c2654babaded0

    • SHA256

      dd817eaebb5b2f5f5aa0c43952b56446cdf55800738490d89bce572f5c1721e6

    • SHA512

      289941633799d79d7d8e54e9602fd4be325d3eb6e703859ceeb4728c002cc1ffa574627468f20666c3338caf7ef281c6bab08324b5bfddc808a66863df5e7a21

    • SSDEEP

      1536:x5zXWLYmuANb2AjR9gQ0TSQwHUF1QhIi7g4/M7bh6DQg6qQVMsdiREj3gc2YBkWg:NCnN9SSQw0FWz7n/IbTQREIiNtvW

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks