General

  • Target

    2c70f7f2ef565dcb464f8e45836ea82714e55efdbc5f95c29660fe04a93923f4

  • Size

    125KB

  • Sample

    240715-n86yssxclq

  • MD5

    653369eeb823edc4927fdf42b9c8a9ee

  • SHA1

    c621cb3990e82c92d239289dc2aaf7dc79f0b637

  • SHA256

    2c70f7f2ef565dcb464f8e45836ea82714e55efdbc5f95c29660fe04a93923f4

  • SHA512

    2f3d6f2917cd68c46816e2ef208e1271384d00d2939cb4a2974f8a3e387c91f692d9f6dbc76d203e290683fb4d900e6de14089b461920e5c11c9e0e3f92eebc6

  • SSDEEP

    3072:qeTadCYPGl4H1iY4dI3EpnsxpioR3uSh:qeTaduw1iYqn2

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      2c70f7f2ef565dcb464f8e45836ea82714e55efdbc5f95c29660fe04a93923f4

    • Size

      125KB

    • MD5

      653369eeb823edc4927fdf42b9c8a9ee

    • SHA1

      c621cb3990e82c92d239289dc2aaf7dc79f0b637

    • SHA256

      2c70f7f2ef565dcb464f8e45836ea82714e55efdbc5f95c29660fe04a93923f4

    • SHA512

      2f3d6f2917cd68c46816e2ef208e1271384d00d2939cb4a2974f8a3e387c91f692d9f6dbc76d203e290683fb4d900e6de14089b461920e5c11c9e0e3f92eebc6

    • SSDEEP

      3072:qeTadCYPGl4H1iY4dI3EpnsxpioR3uSh:qeTaduw1iYqn2

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks