Overview

overview

10

Static

static

3

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3f8f8a90dd1e683677e75d3f55d3f8afd27dbf90a64d559991af962bff1f296d

  • Size

    126KB

  • Sample

    240715-n8gnxazcla

  • MD5

    8f349c8513da88a2c71be86f68297339

  • SHA1

    f90f0e3d03ca60601afe5bd472a29eb2ea11b5b6

  • SHA256

    3f8f8a90dd1e683677e75d3f55d3f8afd27dbf90a64d559991af962bff1f296d

  • SHA512

    1f3f2430a7dfba0d05f7df220fe834f125067762f5e80891fb47a771ad073fbc113cc311dfbe391fd2522095dfaeaf4def558731fae36af43b4e35284ffe3128

  • SSDEEP

    3072:9rcnoXk4btHIvbhFfiXw1nSKy9w8NacU3OuPPw5R65rvNExV:9rMcb4TfiXw1G9wWU3jnwu5jyxV

Score
10/10
strelastealer

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      3f8f8a90dd1e683677e75d3f55d3f8afd27dbf90a64d559991af962bff1f296d

    • Size

      126KB

    • MD5

      8f349c8513da88a2c71be86f68297339

    • SHA1

      f90f0e3d03ca60601afe5bd472a29eb2ea11b5b6

    • SHA256

      3f8f8a90dd1e683677e75d3f55d3f8afd27dbf90a64d559991af962bff1f296d

    • SHA512

      1f3f2430a7dfba0d05f7df220fe834f125067762f5e80891fb47a771ad073fbc113cc311dfbe391fd2522095dfaeaf4def558731fae36af43b4e35284ffe3128

    • SSDEEP

      3072:9rcnoXk4btHIvbhFfiXw1nSKy9w8NacU3OuPPw5R65rvNExV:9rMcb4TfiXw1G9wWU3jnwu5jyxV

    Score
    10/10
    strelastealer

    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

      stealerstrela
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks