General

  • Target

    01f7b0c413ddf8d926d6281d9049f80adee8510bbfb187f0c4eb1405a1dbac75

  • Size

    123KB

  • Sample

    240715-n8e53swhqp

  • MD5

    9ec6064fdaa4864f375c3b1041dd97a2

  • SHA1

    4607334b0236c30e017ad3582b2fb19c9a1e450f

  • SHA256

    01f7b0c413ddf8d926d6281d9049f80adee8510bbfb187f0c4eb1405a1dbac75

  • SHA512

    8926a9602b4cb968007a776e804decb3d58674f6b8e60a70234945d5d023b7a5c30df597c67d88db0b283b2dbb21e52e880ad314f115c94069032148f08f2161

  • SSDEEP

    3072:e5/sk2OLRYLmNubuvZcIm6gQPnGrXRs2ozMJ:eds7nLGuqBI66zRfoM

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      01f7b0c413ddf8d926d6281d9049f80adee8510bbfb187f0c4eb1405a1dbac75

    • Size

      123KB

    • MD5

      9ec6064fdaa4864f375c3b1041dd97a2

    • SHA1

      4607334b0236c30e017ad3582b2fb19c9a1e450f

    • SHA256

      01f7b0c413ddf8d926d6281d9049f80adee8510bbfb187f0c4eb1405a1dbac75

    • SHA512

      8926a9602b4cb968007a776e804decb3d58674f6b8e60a70234945d5d023b7a5c30df597c67d88db0b283b2dbb21e52e880ad314f115c94069032148f08f2161

    • SSDEEP

      3072:e5/sk2OLRYLmNubuvZcIm6gQPnGrXRs2ozMJ:eds7nLGuqBI66zRfoM

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks