General

  • Target

    040ef66b62ac07242a5d19bebb0e72ed529c363bd2f3084ae05c1a8ae1b97a91

  • Size

    126KB

  • Sample

    240715-n6a4caybpd

  • MD5

    a913287f6e5e647ce1d4e5bef040a448

  • SHA1

    05c22d3aca032bddb35d534c7e944053e657cfa2

  • SHA256

    040ef66b62ac07242a5d19bebb0e72ed529c363bd2f3084ae05c1a8ae1b97a91

  • SHA512

    23dc0fc518809cc547e2a278e95b7c9602c524032d06de5a06ba0b63e3c23ef6ade6fc7b4329f43d08ccd762ab22bcc9d598469d016622b730fc494f657e7a97

  • SSDEEP

    3072:Nh6403NCGvSq0xxIab2zOl8B2iuL03UrVMEKVR4krs:NF03lVoxRpOB2aUrVN

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      040ef66b62ac07242a5d19bebb0e72ed529c363bd2f3084ae05c1a8ae1b97a91

    • Size

      126KB

    • MD5

      a913287f6e5e647ce1d4e5bef040a448

    • SHA1

      05c22d3aca032bddb35d534c7e944053e657cfa2

    • SHA256

      040ef66b62ac07242a5d19bebb0e72ed529c363bd2f3084ae05c1a8ae1b97a91

    • SHA512

      23dc0fc518809cc547e2a278e95b7c9602c524032d06de5a06ba0b63e3c23ef6ade6fc7b4329f43d08ccd762ab22bcc9d598469d016622b730fc494f657e7a97

    • SSDEEP

      3072:Nh6403NCGvSq0xxIab2zOl8B2iuL03UrVMEKVR4krs:NF03lVoxRpOB2aUrVN

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks