General

  • Target

    64d4e6ba3c26f59ee378e41a7143626865751ebc294619c0fe0af284ab58b3bf

  • Size

    124KB

  • Sample

    240715-n6j19awbkk

  • MD5

    6612ff4feb79f449795ce38d3a9fe625

  • SHA1

    199f944b9b10158bf66734f60d909c1e86ff8571

  • SHA256

    64d4e6ba3c26f59ee378e41a7143626865751ebc294619c0fe0af284ab58b3bf

  • SHA512

    eaaa9bd1450cdeebc0050e5f39fb7866d6e301fe2f1d85b5da85b489d2bc2ea137c3b1c4276d5438bbd6623e9418779541ca460b419c853667c3a09f71da71a5

  • SSDEEP

    3072:La/6gOiwkEvIwIiRLvlx4CrlFCmc/q9yO9V4YRTjeFamiT97AplCzOE:ATgPIwvLvJjCmcC7nRuFNmAp

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      64d4e6ba3c26f59ee378e41a7143626865751ebc294619c0fe0af284ab58b3bf

    • Size

      124KB

    • MD5

      6612ff4feb79f449795ce38d3a9fe625

    • SHA1

      199f944b9b10158bf66734f60d909c1e86ff8571

    • SHA256

      64d4e6ba3c26f59ee378e41a7143626865751ebc294619c0fe0af284ab58b3bf

    • SHA512

      eaaa9bd1450cdeebc0050e5f39fb7866d6e301fe2f1d85b5da85b489d2bc2ea137c3b1c4276d5438bbd6623e9418779541ca460b419c853667c3a09f71da71a5

    • SSDEEP

      3072:La/6gOiwkEvIwIiRLvlx4CrlFCmc/q9yO9V4YRTjeFamiT97AplCzOE:ATgPIwvLvJjCmcC7nRuFNmAp

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks