General

  • Target

    2ecf636b872c79abc5ee503eb5b27743d54aab39acd164e6a7e635fe6cbb35c0

  • Size

    123KB

  • Sample

    240715-n8nr8axaqk

  • MD5

    24fd8d9fbfbd322ec7c7b2fcaaabef13

  • SHA1

    50819b15d9792b3f676521d5fb7221b9f1e564cf

  • SHA256

    2ecf636b872c79abc5ee503eb5b27743d54aab39acd164e6a7e635fe6cbb35c0

  • SHA512

    34c41934e26abe88a8297a601c2262067ec6b3b4bfca2f982507913d1e14fbf540abfe5fa0bb8d8fbde50e8a662f49d5935b808c26a1e3095451ea315fc0a429

  • SSDEEP

    1536:Hf4LOppq8gzIAQkmCTPzP6l9p9JEWMAZEU2SbTdgURl389pcqfxV:HIOfq1mCrzCFbEWMOEUzXX6

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      2ecf636b872c79abc5ee503eb5b27743d54aab39acd164e6a7e635fe6cbb35c0

    • Size

      123KB

    • MD5

      24fd8d9fbfbd322ec7c7b2fcaaabef13

    • SHA1

      50819b15d9792b3f676521d5fb7221b9f1e564cf

    • SHA256

      2ecf636b872c79abc5ee503eb5b27743d54aab39acd164e6a7e635fe6cbb35c0

    • SHA512

      34c41934e26abe88a8297a601c2262067ec6b3b4bfca2f982507913d1e14fbf540abfe5fa0bb8d8fbde50e8a662f49d5935b808c26a1e3095451ea315fc0a429

    • SSDEEP

      1536:Hf4LOppq8gzIAQkmCTPzP6l9p9JEWMAZEU2SbTdgURl389pcqfxV:HIOfq1mCrzCFbEWMOEUzXX6

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks