General

  • Target

    87e9cb9ee48041178a4daddfd88659851ea91046cb752fcb7c14d178381546b9

  • Size

    122KB

  • Sample

    240715-n8k2bsxamp

  • MD5

    6bd58c6a0c28da5e4efc84d5f4280fa3

  • SHA1

    aa063046d732afa8bd13e8524ddc7cec8f04bafa

  • SHA256

    87e9cb9ee48041178a4daddfd88659851ea91046cb752fcb7c14d178381546b9

  • SHA512

    6c00efe2045cbb3b08bfe4521d51dafc8681383b51c63c9eecf071605fd37436bbe730c36cdaac906ed2f2024cfd93fb3411ff09beae3e774d8ad3af61dda157

  • SSDEEP

    3072:PjAvy8tkzN6j0qhLsN81MUKRNQlC4bdyDJ5mWoizKDssW+EiB:Pjky8WNW0qU3NQ8mdyDJ5mqzcssW/+

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      87e9cb9ee48041178a4daddfd88659851ea91046cb752fcb7c14d178381546b9

    • Size

      122KB

    • MD5

      6bd58c6a0c28da5e4efc84d5f4280fa3

    • SHA1

      aa063046d732afa8bd13e8524ddc7cec8f04bafa

    • SHA256

      87e9cb9ee48041178a4daddfd88659851ea91046cb752fcb7c14d178381546b9

    • SHA512

      6c00efe2045cbb3b08bfe4521d51dafc8681383b51c63c9eecf071605fd37436bbe730c36cdaac906ed2f2024cfd93fb3411ff09beae3e774d8ad3af61dda157

    • SSDEEP

      3072:PjAvy8tkzN6j0qhLsN81MUKRNQlC4bdyDJ5mWoizKDssW+EiB:Pjky8WNW0qU3NQ8mdyDJ5mqzcssW/+

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks