General

  • Target

    ddd894a76f1dc070ade67262698701e4a5508b9ba902f5f7509dc3c4b8cc1e49

  • Size

    124KB

  • Sample

    240715-n6lj3swblk

  • MD5

    b4aea5cad82ea37e1e207abaacf9d794

  • SHA1

    47fa2ec29ea90dbe9e53df465c4612895fc5a928

  • SHA256

    ddd894a76f1dc070ade67262698701e4a5508b9ba902f5f7509dc3c4b8cc1e49

  • SHA512

    25cbf04b93f08b332344c4ec6ffbbd87a1722b4d6019e793728aa702c41af8c11350ef55fa79eccb86cd4283e05ab331959dfd20a5d96bc6a02d080bfee55586

  • SSDEEP

    3072:Y7N5eLedpVpsT9vIzp8Eq6DCuSP1OKLs6W8CmkvZlejhi53g:Gjbmx6qvX3s6K1Z953g

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      ddd894a76f1dc070ade67262698701e4a5508b9ba902f5f7509dc3c4b8cc1e49

    • Size

      124KB

    • MD5

      b4aea5cad82ea37e1e207abaacf9d794

    • SHA1

      47fa2ec29ea90dbe9e53df465c4612895fc5a928

    • SHA256

      ddd894a76f1dc070ade67262698701e4a5508b9ba902f5f7509dc3c4b8cc1e49

    • SHA512

      25cbf04b93f08b332344c4ec6ffbbd87a1722b4d6019e793728aa702c41af8c11350ef55fa79eccb86cd4283e05ab331959dfd20a5d96bc6a02d080bfee55586

    • SSDEEP

      3072:Y7N5eLedpVpsT9vIzp8Eq6DCuSP1OKLs6W8CmkvZlejhi53g:Gjbmx6qvX3s6K1Z953g

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks