General

  • Target

    b1714906c9037f443e25c5862a0059abcf623be36ad914d1009a7f93250531fd

  • Size

    123KB

  • Sample

    240715-n8dl9azbqh

  • MD5

    d933abd426e85aee86a9553a57a2cb22

  • SHA1

    0647d3205d4fc003597c4d992dd7ff547a8b269b

  • SHA256

    b1714906c9037f443e25c5862a0059abcf623be36ad914d1009a7f93250531fd

  • SHA512

    dbdd6fd8862dcfb84c8f06af50545ba6f0cbe991f51930409d83b14eea9a34348dd196b4f92334e0fbec30af2912afcf89821b045e1042b4805e75e52f382476

  • SSDEEP

    3072:VY5DvIdqwcHx7wE2gcGvKutj2d/q9Gswo:4DvIdXc6E2XGvKutj23Bo

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      b1714906c9037f443e25c5862a0059abcf623be36ad914d1009a7f93250531fd

    • Size

      123KB

    • MD5

      d933abd426e85aee86a9553a57a2cb22

    • SHA1

      0647d3205d4fc003597c4d992dd7ff547a8b269b

    • SHA256

      b1714906c9037f443e25c5862a0059abcf623be36ad914d1009a7f93250531fd

    • SHA512

      dbdd6fd8862dcfb84c8f06af50545ba6f0cbe991f51930409d83b14eea9a34348dd196b4f92334e0fbec30af2912afcf89821b045e1042b4805e75e52f382476

    • SSDEEP

      3072:VY5DvIdqwcHx7wE2gcGvKutj2d/q9Gswo:4DvIdXc6E2XGvKutj23Bo

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks