Overview

overview

10

Static

static

3

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    680e1a65970c0558692c837c166283e685704dfcd4614e34a48c2859700d8d33

  • Size

    124KB

  • Sample

    240715-n6g7nawaqn

  • MD5

    a85e464e7e202f056b9de204a23fc2e4

  • SHA1

    cb7acf4cbdfca1ab4db9ae00741344b6c99c1ded

  • SHA256

    680e1a65970c0558692c837c166283e685704dfcd4614e34a48c2859700d8d33

  • SHA512

    a4f05080f2b7f92c4c583aa7ba3ca93c39853b7dd630051c3a6b8d979fb236ff7c278c7770e5c6d835c497e1fe634e0676511b920dea211c30f5b8d855ba1fda

  • SSDEEP

    3072:a9b5Z+wzthvLPpezHZEjTK2S0/ZnPHHANBUNx:6b5ZlL8zHZEZLxfA

Score
10/10
strelastealer

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      680e1a65970c0558692c837c166283e685704dfcd4614e34a48c2859700d8d33

    • Size

      124KB

    • MD5

      a85e464e7e202f056b9de204a23fc2e4

    • SHA1

      cb7acf4cbdfca1ab4db9ae00741344b6c99c1ded

    • SHA256

      680e1a65970c0558692c837c166283e685704dfcd4614e34a48c2859700d8d33

    • SHA512

      a4f05080f2b7f92c4c583aa7ba3ca93c39853b7dd630051c3a6b8d979fb236ff7c278c7770e5c6d835c497e1fe634e0676511b920dea211c30f5b8d855ba1fda

    • SSDEEP

      3072:a9b5Z+wzthvLPpezHZEjTK2S0/ZnPHHANBUNx:6b5ZlL8zHZEZLxfA

    Score
    10/10
    strelastealer

    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

      stealerstrela
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks