General

  • Target

    6d6f4a9cdb2d48208cb8b048347537758392ee79207e52ea68ff0f1e521f0f41

  • Size

    123KB

  • Sample

    240715-n58cfsybjg

  • MD5

    f62c749647521d8504411cf6f6e29fdf

  • SHA1

    d162c28a01741d482895b55957b5bfceebeb7f13

  • SHA256

    6d6f4a9cdb2d48208cb8b048347537758392ee79207e52ea68ff0f1e521f0f41

  • SHA512

    7ddf91b88393a0432205f23308433d041a72bd1e2c776a16ec7f359c9eab3fb732562c9a9a0f0790c84106a3420165f5ff651741e81d4c966fcc93dc7802c7f9

  • SSDEEP

    3072:lQjg2vQZZczfFEiC38hSFvM2A65F9jz93ZTbV:og2vQZGz3QJ/TbV

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      6d6f4a9cdb2d48208cb8b048347537758392ee79207e52ea68ff0f1e521f0f41

    • Size

      123KB

    • MD5

      f62c749647521d8504411cf6f6e29fdf

    • SHA1

      d162c28a01741d482895b55957b5bfceebeb7f13

    • SHA256

      6d6f4a9cdb2d48208cb8b048347537758392ee79207e52ea68ff0f1e521f0f41

    • SHA512

      7ddf91b88393a0432205f23308433d041a72bd1e2c776a16ec7f359c9eab3fb732562c9a9a0f0790c84106a3420165f5ff651741e81d4c966fcc93dc7802c7f9

    • SSDEEP

      3072:lQjg2vQZZczfFEiC38hSFvM2A65F9jz93ZTbV:og2vQZGz3QJ/TbV

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks