General

  • Target

    50436a936238ac996cba2ba52bd596d1aa67a0a964695b1a07c2119ef13b0cb6

  • Size

    124KB

  • Sample

    240715-n58yzsvhpl

  • MD5

    ead45c4044f0fb0f05d401aeafb507ab

  • SHA1

    9faafc042ea695a74648f35c7f6010603f64cda3

  • SHA256

    50436a936238ac996cba2ba52bd596d1aa67a0a964695b1a07c2119ef13b0cb6

  • SHA512

    654f22933362305c20d1e2e400172765b26a99c315eb0a882d0454d245acb4a599858a09e764b166e2bdd2e17a632aa4b258c28db0bd592e617acf6ab2e739b6

  • SSDEEP

    3072:8/ypLCNdkNrmjgFjRkWChjRt+FgUNgdR/Im/R8luneYlDNc:8apLSkMcGhjRignRL/gunnx

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      50436a936238ac996cba2ba52bd596d1aa67a0a964695b1a07c2119ef13b0cb6

    • Size

      124KB

    • MD5

      ead45c4044f0fb0f05d401aeafb507ab

    • SHA1

      9faafc042ea695a74648f35c7f6010603f64cda3

    • SHA256

      50436a936238ac996cba2ba52bd596d1aa67a0a964695b1a07c2119ef13b0cb6

    • SHA512

      654f22933362305c20d1e2e400172765b26a99c315eb0a882d0454d245acb4a599858a09e764b166e2bdd2e17a632aa4b258c28db0bd592e617acf6ab2e739b6

    • SSDEEP

      3072:8/ypLCNdkNrmjgFjRkWChjRt+FgUNgdR/Im/R8luneYlDNc:8apLSkMcGhjRignRL/gunnx

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks