General

  • Target

    2d2f75eaab88d51ea3b165cf63f965ad5f1ee4df72f5eea573dec909aa0a8fa8

  • Size

    122KB

  • Sample

    240715-n891fsxcnp

  • MD5

    bbcc85eba3bb0dcbcb8a45e9961ba46b

  • SHA1

    bafb40bbda1e5542aef3e93b3e9827a9c1d801d7

  • SHA256

    2d2f75eaab88d51ea3b165cf63f965ad5f1ee4df72f5eea573dec909aa0a8fa8

  • SHA512

    a9d5258080226d82b56bb87612fb9000b5c766f3bf512392f4447704faee949484151893bafa5907ee98462a596b2015ed634ae6dabdbd6aeca9c150f8bdfca7

  • SSDEEP

    1536:/PvZ+oEaJ2JILtiBr68YhdMt46gmbhANMiX+AU0ag0PLuqpd5yiBHzbjgf8aZtQj:/UAoJILtqRwXUKK3fAiBTbje7BBo9

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      2d2f75eaab88d51ea3b165cf63f965ad5f1ee4df72f5eea573dec909aa0a8fa8

    • Size

      122KB

    • MD5

      bbcc85eba3bb0dcbcb8a45e9961ba46b

    • SHA1

      bafb40bbda1e5542aef3e93b3e9827a9c1d801d7

    • SHA256

      2d2f75eaab88d51ea3b165cf63f965ad5f1ee4df72f5eea573dec909aa0a8fa8

    • SHA512

      a9d5258080226d82b56bb87612fb9000b5c766f3bf512392f4447704faee949484151893bafa5907ee98462a596b2015ed634ae6dabdbd6aeca9c150f8bdfca7

    • SSDEEP

      1536:/PvZ+oEaJ2JILtiBr68YhdMt46gmbhANMiX+AU0ag0PLuqpd5yiBHzbjgf8aZtQj:/UAoJILtqRwXUKK3fAiBTbje7BBo9

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks