General

  • Target

    948efc6ca6fd84112175e6cc4cb7a9596838634954642aae0a6a3f91e916c1ed

  • Size

    124KB

  • Sample

    240715-n8dbgswhnr

  • MD5

    c5a55b485995783755042bc2d17623df

  • SHA1

    77a51c004542881ca8b30daf4d6e198b567038f4

  • SHA256

    948efc6ca6fd84112175e6cc4cb7a9596838634954642aae0a6a3f91e916c1ed

  • SHA512

    1d95f0e4bfaf1cee7f15515173adc7870ab049b56a192ba6419f0caed777c46bf8a315c5f9442bb30d8648fe0adfc15fd2f98d8b37a894b61cb682820688f2f4

  • SSDEEP

    3072:B6+eq6T2qYUDn0Gwj7tvGAja/FAloLWsMG:I+eqIisn0Gwjxk/FoFG

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      948efc6ca6fd84112175e6cc4cb7a9596838634954642aae0a6a3f91e916c1ed

    • Size

      124KB

    • MD5

      c5a55b485995783755042bc2d17623df

    • SHA1

      77a51c004542881ca8b30daf4d6e198b567038f4

    • SHA256

      948efc6ca6fd84112175e6cc4cb7a9596838634954642aae0a6a3f91e916c1ed

    • SHA512

      1d95f0e4bfaf1cee7f15515173adc7870ab049b56a192ba6419f0caed777c46bf8a315c5f9442bb30d8648fe0adfc15fd2f98d8b37a894b61cb682820688f2f4

    • SSDEEP

      3072:B6+eq6T2qYUDn0Gwj7tvGAja/FAloLWsMG:I+eqIisn0Gwjxk/FoFG

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks