General

  • Target

    603b3e0e4bf37cd85dc5fb2c241b553584dcab6a19d5c77d87349a29960432d7

  • Size

    123KB

  • Sample

    240715-n9kf7axdnq

  • MD5

    79e2a76ed5bf6e9aeab8be737f4b4347

  • SHA1

    180fb049749c6f2887aeb1dc3a52bc62ac3a442f

  • SHA256

    603b3e0e4bf37cd85dc5fb2c241b553584dcab6a19d5c77d87349a29960432d7

  • SHA512

    cbf8f88cf6055f6c99f6780e3c9b4bd77b9a67d1c0832082c359a3e568ef16bccc658d4245052528638cd8fea2df9d7543d741bc3eb7140a965237012d59590c

  • SSDEEP

    3072:8ov2g4cg518fKtqNUd6wU0k+Pfie2/eTTLcvorEN:8y2g4cA8fV1Wk+niqXr6

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      603b3e0e4bf37cd85dc5fb2c241b553584dcab6a19d5c77d87349a29960432d7

    • Size

      123KB

    • MD5

      79e2a76ed5bf6e9aeab8be737f4b4347

    • SHA1

      180fb049749c6f2887aeb1dc3a52bc62ac3a442f

    • SHA256

      603b3e0e4bf37cd85dc5fb2c241b553584dcab6a19d5c77d87349a29960432d7

    • SHA512

      cbf8f88cf6055f6c99f6780e3c9b4bd77b9a67d1c0832082c359a3e568ef16bccc658d4245052528638cd8fea2df9d7543d741bc3eb7140a965237012d59590c

    • SSDEEP

      3072:8ov2g4cg518fKtqNUd6wU0k+Pfie2/eTTLcvorEN:8y2g4cA8fV1Wk+niqXr6

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks