General

  • Target

    40e9f3dfe29114023948ccdc55f3a6bcce94837e25c703cee3ef6d4174f4f90c

  • Size

    125KB

  • Sample

    240715-n57qxsyarh

  • MD5

    23148001bc11430a36e65c8f9b71fce2

  • SHA1

    3de742f16c7f56bbb32e098bc4ecccc74576f911

  • SHA256

    40e9f3dfe29114023948ccdc55f3a6bcce94837e25c703cee3ef6d4174f4f90c

  • SHA512

    999a1d83e654511e2d0485b41fdf9fcee5aeece3676189d9dffc6c7bf7a46b9d8c009145230050b6eeb873e409eab41cc1427943e0bf29831bd0f6c644843e39

  • SSDEEP

    3072:wkfQzOOU2BJ4AXgy7JthtZTrsN5lPg49/QMV4pOd7i:bEAmZ1PnTrWcCIzpOE

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      40e9f3dfe29114023948ccdc55f3a6bcce94837e25c703cee3ef6d4174f4f90c

    • Size

      125KB

    • MD5

      23148001bc11430a36e65c8f9b71fce2

    • SHA1

      3de742f16c7f56bbb32e098bc4ecccc74576f911

    • SHA256

      40e9f3dfe29114023948ccdc55f3a6bcce94837e25c703cee3ef6d4174f4f90c

    • SHA512

      999a1d83e654511e2d0485b41fdf9fcee5aeece3676189d9dffc6c7bf7a46b9d8c009145230050b6eeb873e409eab41cc1427943e0bf29831bd0f6c644843e39

    • SSDEEP

      3072:wkfQzOOU2BJ4AXgy7JthtZTrsN5lPg49/QMV4pOd7i:bEAmZ1PnTrWcCIzpOE

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks