General

  • Target

    7b9639f6808272435e805535a2512a91311da9c518b098585ba6c10c498c076b

  • Size

    125KB

  • Sample

    240715-n8wstsxbnq

  • MD5

    4925e71acf6691cc031ab15f10fdf4dc

  • SHA1

    ddf5d67e157810b60c236b1b115afffa2c65be64

  • SHA256

    7b9639f6808272435e805535a2512a91311da9c518b098585ba6c10c498c076b

  • SHA512

    b9fc424a93d91d6a2902366ca92a0fb15fd604a3f3afe26cbce2c425dd46913455a4cdc7f89b5d60f04c6623bf1695e1b23be3abb419b42aa370680b66cdd4d3

  • SSDEEP

    3072:KZIFA3j78PdFeeY3hlNLrgqGp94W0w8Kxu48knG9s:K+FAEPdILBgqW4W9x1tnG9

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      7b9639f6808272435e805535a2512a91311da9c518b098585ba6c10c498c076b

    • Size

      125KB

    • MD5

      4925e71acf6691cc031ab15f10fdf4dc

    • SHA1

      ddf5d67e157810b60c236b1b115afffa2c65be64

    • SHA256

      7b9639f6808272435e805535a2512a91311da9c518b098585ba6c10c498c076b

    • SHA512

      b9fc424a93d91d6a2902366ca92a0fb15fd604a3f3afe26cbce2c425dd46913455a4cdc7f89b5d60f04c6623bf1695e1b23be3abb419b42aa370680b66cdd4d3

    • SSDEEP

      3072:KZIFA3j78PdFeeY3hlNLrgqGp94W0w8Kxu48knG9s:K+FAEPdILBgqW4W9x1tnG9

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks