Overview

overview

10

Static

static

3

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ec9ba01878f7b3820599dcabf87f8e9533b6233868c9222c2aeb72786de27fa3

  • Size

    125KB

  • Sample

    240715-n9alzsxcpk

  • MD5

    d82d599794bd243ae45ee1a272a78967

  • SHA1

    9e99513c4922644d604e14dcf13a016818c93c9f

  • SHA256

    ec9ba01878f7b3820599dcabf87f8e9533b6233868c9222c2aeb72786de27fa3

  • SHA512

    a096269abdc27effb9e1c82e8fb5184a59b4018739d685270c01bbb34b419bc4d044d74db60a9b951acd8ecd74bc427d91e41ee291f2b1859aabbb3b4ce3b730

  • SSDEEP

    3072:3zn/As5i4Iz4I+IboslgA0I8IBIrcBhn7Y/:D53I/plN0I8/QE

Score
10/10
strelastealer

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      ec9ba01878f7b3820599dcabf87f8e9533b6233868c9222c2aeb72786de27fa3

    • Size

      125KB

    • MD5

      d82d599794bd243ae45ee1a272a78967

    • SHA1

      9e99513c4922644d604e14dcf13a016818c93c9f

    • SHA256

      ec9ba01878f7b3820599dcabf87f8e9533b6233868c9222c2aeb72786de27fa3

    • SHA512

      a096269abdc27effb9e1c82e8fb5184a59b4018739d685270c01bbb34b419bc4d044d74db60a9b951acd8ecd74bc427d91e41ee291f2b1859aabbb3b4ce3b730

    • SSDEEP

      3072:3zn/As5i4Iz4I+IboslgA0I8IBIrcBhn7Y/:D53I/plN0I8/QE

    Score
    10/10
    strelastealer

    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

      stealerstrela
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks