General

  • Target

    788bfd09934b859e438fb1bcc2addf0fd4c44562d31fd803ad3d5915bcb718b3

  • Size

    125KB

  • Sample

    240715-n6h4yswarn

  • MD5

    e8091e238031b455fc445fe30234fcfb

  • SHA1

    1fd30e068622a9722105de90374efd7e0bacdbd0

  • SHA256

    788bfd09934b859e438fb1bcc2addf0fd4c44562d31fd803ad3d5915bcb718b3

  • SHA512

    265dbfc08d3c776e371a39c9f99e02c927c5bf573760374b3161d555fa7e80834ceb4fe998cb793d4d7cc4cced0b6eec4156ef5fbbd27227170787181541faff

  • SSDEEP

    3072:9MYLZsDMJuajz3wn9oMRzkd7N5toYrc6KVWR:9ZLZsIXjbio6A7N5t3NKVW

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      788bfd09934b859e438fb1bcc2addf0fd4c44562d31fd803ad3d5915bcb718b3

    • Size

      125KB

    • MD5

      e8091e238031b455fc445fe30234fcfb

    • SHA1

      1fd30e068622a9722105de90374efd7e0bacdbd0

    • SHA256

      788bfd09934b859e438fb1bcc2addf0fd4c44562d31fd803ad3d5915bcb718b3

    • SHA512

      265dbfc08d3c776e371a39c9f99e02c927c5bf573760374b3161d555fa7e80834ceb4fe998cb793d4d7cc4cced0b6eec4156ef5fbbd27227170787181541faff

    • SSDEEP

      3072:9MYLZsDMJuajz3wn9oMRzkd7N5toYrc6KVWR:9ZLZsIXjbio6A7N5t3NKVW

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks