Overview

overview

10

Static

static

3

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1c0884c7ea3e478ac9ae3b01c865f27d4bc565faa4a1fd3daf03d748d4590f68

  • Size

    121KB

  • Sample

    240715-n58cfsybka

  • MD5

    5e2d8ab8cf1f0f4afe01dd796303fbe4

  • SHA1

    1dbbabf9b4e6fdb74cfc59f3e3902f8ed2a5c23f

  • SHA256

    1c0884c7ea3e478ac9ae3b01c865f27d4bc565faa4a1fd3daf03d748d4590f68

  • SHA512

    a3d52e1cf9856883fa83ae115850f58eda2dbcca3f6d5f9de79b5d96d50d057aa27fc4dcfd1025ae9f6c1970594bb12038bfc7c55b054c6a8c67748aaff43bcf

  • SSDEEP

    3072:ebrsEiIKw19qqgDFaEJjC3UU+Wh9YxKSHev1:s3KwSJHJmXeK1

Score
10/10
strelastealer

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      1c0884c7ea3e478ac9ae3b01c865f27d4bc565faa4a1fd3daf03d748d4590f68

    • Size

      121KB

    • MD5

      5e2d8ab8cf1f0f4afe01dd796303fbe4

    • SHA1

      1dbbabf9b4e6fdb74cfc59f3e3902f8ed2a5c23f

    • SHA256

      1c0884c7ea3e478ac9ae3b01c865f27d4bc565faa4a1fd3daf03d748d4590f68

    • SHA512

      a3d52e1cf9856883fa83ae115850f58eda2dbcca3f6d5f9de79b5d96d50d057aa27fc4dcfd1025ae9f6c1970594bb12038bfc7c55b054c6a8c67748aaff43bcf

    • SSDEEP

      3072:ebrsEiIKw19qqgDFaEJjC3UU+Wh9YxKSHev1:s3KwSJHJmXeK1

    Score
    10/10
    strelastealer

    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

      stealerstrela
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks