General

  • Target

    2fd8b8abe0661adb69b4a44d0d647f71af5b8ba635938ff8bca0c374bc044700

  • Size

    124KB

  • Sample

    240715-n8qa2sxarm

  • MD5

    bdacca84fabda451b7f9c98004678e6a

  • SHA1

    638621e1523ab1674d1331637cd68c4356ae4cb2

  • SHA256

    2fd8b8abe0661adb69b4a44d0d647f71af5b8ba635938ff8bca0c374bc044700

  • SHA512

    fb95f1b1427adee382fe9af4e72777e3e4115a74fd584c22dd016ee269a546fbf6d95aa2b04257afcf3dbd957ef1d1e07e90f40b3e7bc8418750fe0f17edcdae

  • SSDEEP

    3072:qZ3krXxfJp/+2+pRD4EzURO2o/M1ryP5nE+HuwuerxyS:qZ0TBJpB+pxVR251I5n/Huyf

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      2fd8b8abe0661adb69b4a44d0d647f71af5b8ba635938ff8bca0c374bc044700

    • Size

      124KB

    • MD5

      bdacca84fabda451b7f9c98004678e6a

    • SHA1

      638621e1523ab1674d1331637cd68c4356ae4cb2

    • SHA256

      2fd8b8abe0661adb69b4a44d0d647f71af5b8ba635938ff8bca0c374bc044700

    • SHA512

      fb95f1b1427adee382fe9af4e72777e3e4115a74fd584c22dd016ee269a546fbf6d95aa2b04257afcf3dbd957ef1d1e07e90f40b3e7bc8418750fe0f17edcdae

    • SSDEEP

      3072:qZ3krXxfJp/+2+pRD4EzURO2o/M1ryP5nE+HuwuerxyS:qZ0TBJpB+pxVR251I5n/Huyf

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks