General

  • Target

    e352da44daa02e8e8f83e8cd37fd49909c7e60ba304e2177903cfd1e7f8527ab

  • Size

    122KB

  • Sample

    240715-n6hhesycpb

  • MD5

    268d9b7fd4b320392bd36581b18a368a

  • SHA1

    0f51df361cf9db3acc43bb6cea5573dd78318ede

  • SHA256

    e352da44daa02e8e8f83e8cd37fd49909c7e60ba304e2177903cfd1e7f8527ab

  • SHA512

    bc3e3e20540ed23b56030b6e71dc28ed9b535f10117469c6738dca1d08c62f87bc9af5cc1fa9a739c91f225346358a3d042b06fe7d530f6cc6a1dd8df23cf58d

  • SSDEEP

    3072:gDkmwoYt8KQ6AhA8AtxlUgAoJa8LSa9WZ8oWuZHH14RXVa:gDMojKdAhmjlmow8XEZ85ckX8

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      e352da44daa02e8e8f83e8cd37fd49909c7e60ba304e2177903cfd1e7f8527ab

    • Size

      122KB

    • MD5

      268d9b7fd4b320392bd36581b18a368a

    • SHA1

      0f51df361cf9db3acc43bb6cea5573dd78318ede

    • SHA256

      e352da44daa02e8e8f83e8cd37fd49909c7e60ba304e2177903cfd1e7f8527ab

    • SHA512

      bc3e3e20540ed23b56030b6e71dc28ed9b535f10117469c6738dca1d08c62f87bc9af5cc1fa9a739c91f225346358a3d042b06fe7d530f6cc6a1dd8df23cf58d

    • SSDEEP

      3072:gDkmwoYt8KQ6AhA8AtxlUgAoJa8LSa9WZ8oWuZHH14RXVa:gDMojKdAhmjlmow8XEZ85ckX8

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks