General

  • Target

    349977a4648b8e90f765118965d51de082ce321622172d4678ec77bc4a4c518e

  • Size

    122KB

  • Sample

    240715-n58cfsvhmq

  • MD5

    d396c9bcf643ede30a345e0f2b640575

  • SHA1

    b85b62676d18bd41ab761dedcd940f92cc9c7af9

  • SHA256

    349977a4648b8e90f765118965d51de082ce321622172d4678ec77bc4a4c518e

  • SHA512

    b499c0df5f1cb46f672f4c5f0afde81198ea7a2fe7f10a21f506d554f0b5be504aa22a08fb23cfaad6bb86cbd8bb33b589973bf759d165e7edf61da032c06307

  • SSDEEP

    3072:LUvVXuXBR986y5B8jdWoGnEqqjxiJTneyRGE3bHeZo9:YvV+LqZ5BUdW7EqKOjeykED9

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      349977a4648b8e90f765118965d51de082ce321622172d4678ec77bc4a4c518e

    • Size

      122KB

    • MD5

      d396c9bcf643ede30a345e0f2b640575

    • SHA1

      b85b62676d18bd41ab761dedcd940f92cc9c7af9

    • SHA256

      349977a4648b8e90f765118965d51de082ce321622172d4678ec77bc4a4c518e

    • SHA512

      b499c0df5f1cb46f672f4c5f0afde81198ea7a2fe7f10a21f506d554f0b5be504aa22a08fb23cfaad6bb86cbd8bb33b589973bf759d165e7edf61da032c06307

    • SSDEEP

      3072:LUvVXuXBR986y5B8jdWoGnEqqjxiJTneyRGE3bHeZo9:YvV+LqZ5BUdW7EqKOjeykED9

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks