General

  • Target

    1a72982a91c4fc71574c8067a2f065eb9e9e984d79e6dc9441a92c6ab5418c74

  • Size

    124KB

  • Sample

    240715-n589ravhpp

  • MD5

    c58d242b7133f4e48b6bd2ede69da684

  • SHA1

    688b53e6eb96957a78d13623b9caea087ea7a609

  • SHA256

    1a72982a91c4fc71574c8067a2f065eb9e9e984d79e6dc9441a92c6ab5418c74

  • SHA512

    0fba3986c4d43fd0c94d25d36c84dd01bfa1c31087c03de114be566bf857638f6a687a1af487681e8878090dcc0f4942f047a73c7cdbea4612308bca5297c84e

  • SSDEEP

    3072:Y3cBvYYm9ACipoaeLdy26pm8F+wv0hazkeDAimwHhKD:gx9Alpoa0IXMapEim2K

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      1a72982a91c4fc71574c8067a2f065eb9e9e984d79e6dc9441a92c6ab5418c74

    • Size

      124KB

    • MD5

      c58d242b7133f4e48b6bd2ede69da684

    • SHA1

      688b53e6eb96957a78d13623b9caea087ea7a609

    • SHA256

      1a72982a91c4fc71574c8067a2f065eb9e9e984d79e6dc9441a92c6ab5418c74

    • SHA512

      0fba3986c4d43fd0c94d25d36c84dd01bfa1c31087c03de114be566bf857638f6a687a1af487681e8878090dcc0f4942f047a73c7cdbea4612308bca5297c84e

    • SSDEEP

      3072:Y3cBvYYm9ACipoaeLdy26pm8F+wv0hazkeDAimwHhKD:gx9Alpoa0IXMapEim2K

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks