General

  • Target

    aa63ee71a2e292e1acbc22d9838b763bb92080aa43053df9b74f58b7b55a1dae

  • Size

    123KB

  • Sample

    240715-n6fntsyclc

  • MD5

    53f8f92b1f477872c3b519fbd48bac3b

  • SHA1

    04a3d46254053fd72ebcb41f6baad42e1b7bccb3

  • SHA256

    aa63ee71a2e292e1acbc22d9838b763bb92080aa43053df9b74f58b7b55a1dae

  • SHA512

    b8cb2f8a668e09c7e0dee54415c3c8dd2282a2e39885b2cd88a878cb080e491cae6336fa30c6c31ad75b10718dc6103a8c6ad001f198271d6afe7b609d4f9e85

  • SSDEEP

    3072:MMp7MtRjR44cwQ0N6l+REXlGZRj0TAK/VfDbCqcZD:MMp7MtePoqX8RATAYV/WD

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      aa63ee71a2e292e1acbc22d9838b763bb92080aa43053df9b74f58b7b55a1dae

    • Size

      123KB

    • MD5

      53f8f92b1f477872c3b519fbd48bac3b

    • SHA1

      04a3d46254053fd72ebcb41f6baad42e1b7bccb3

    • SHA256

      aa63ee71a2e292e1acbc22d9838b763bb92080aa43053df9b74f58b7b55a1dae

    • SHA512

      b8cb2f8a668e09c7e0dee54415c3c8dd2282a2e39885b2cd88a878cb080e491cae6336fa30c6c31ad75b10718dc6103a8c6ad001f198271d6afe7b609d4f9e85

    • SSDEEP

      3072:MMp7MtRjR44cwQ0N6l+REXlGZRj0TAK/VfDbCqcZD:MMp7MtePoqX8RATAYV/WD

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks