General

  • Target

    89f840bb9a69d634dc8c421c8b38e4c6d32a389e0e075afa92c9395948851532

  • Size

    122KB

  • Sample

    240715-n8h7qszcna

  • MD5

    eb9421da25d6ba3b460a11a6ef87c106

  • SHA1

    82c935451ef7c9411343a4c0816ab4fd610c24e6

  • SHA256

    89f840bb9a69d634dc8c421c8b38e4c6d32a389e0e075afa92c9395948851532

  • SHA512

    7621761854ab3ca6fff4b79ad6dea24cb193024cc5b87ac5632f60e0d826d2591f57e4d72859d3efb7c15857016d04d89657ebd6396aeeb8b28b98996cdc5cfe

  • SSDEEP

    3072:OpJzzCyvEpQFmMl73Kdsy9PumF3U+tC1TbxEnHbGYEQuLTWOSK:Onzxv0QYMlLIxn4FqqQuOn

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      89f840bb9a69d634dc8c421c8b38e4c6d32a389e0e075afa92c9395948851532

    • Size

      122KB

    • MD5

      eb9421da25d6ba3b460a11a6ef87c106

    • SHA1

      82c935451ef7c9411343a4c0816ab4fd610c24e6

    • SHA256

      89f840bb9a69d634dc8c421c8b38e4c6d32a389e0e075afa92c9395948851532

    • SHA512

      7621761854ab3ca6fff4b79ad6dea24cb193024cc5b87ac5632f60e0d826d2591f57e4d72859d3efb7c15857016d04d89657ebd6396aeeb8b28b98996cdc5cfe

    • SSDEEP

      3072:OpJzzCyvEpQFmMl73Kdsy9PumF3U+tC1TbxEnHbGYEQuLTWOSK:Onzxv0QYMlLIxn4FqqQuOn

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks