General

  • Target

    c5828dae865395270adcdbdc0b1f88d548841a52bf0710215f937fba52b1e921

  • Size

    124KB

  • Sample

    240715-n9f4rszfla

  • MD5

    d6770d5fd1251ba022d9169537fd20a4

  • SHA1

    92a3472a507fd5ed61cfe59940e9a668efa2dc0d

  • SHA256

    c5828dae865395270adcdbdc0b1f88d548841a52bf0710215f937fba52b1e921

  • SHA512

    1cf61a9377c81c7a59f88c8e0e44f13fc2cf04c734b1c92fb0dd61f59846c63f01af9a27c97bfce47d8e8812d881ac0159ddaa77538194373f047785da8d8d2c

  • SSDEEP

    3072:DcVixaIKyFFXjWMfRlf8N/a2rV5eORCq3cuRl38lT0:QUKxMJN8ta4V5IuuT0

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      c5828dae865395270adcdbdc0b1f88d548841a52bf0710215f937fba52b1e921

    • Size

      124KB

    • MD5

      d6770d5fd1251ba022d9169537fd20a4

    • SHA1

      92a3472a507fd5ed61cfe59940e9a668efa2dc0d

    • SHA256

      c5828dae865395270adcdbdc0b1f88d548841a52bf0710215f937fba52b1e921

    • SHA512

      1cf61a9377c81c7a59f88c8e0e44f13fc2cf04c734b1c92fb0dd61f59846c63f01af9a27c97bfce47d8e8812d881ac0159ddaa77538194373f047785da8d8d2c

    • SSDEEP

      3072:DcVixaIKyFFXjWMfRlf8N/a2rV5eORCq3cuRl38lT0:QUKxMJN8ta4V5IuuT0

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks