General

  • Target

    69a0b08afb612bd692e34722b2d6e89285ecb93eb459fd859a11efcaf0d02172

  • Size

    124KB

  • Sample

    240715-ntdnpsvbrl

  • MD5

    5de5bf9ac669bf64752dd5500933ab10

  • SHA1

    1a962cf5ff220b7fa2182c481d77665165a311d4

  • SHA256

    69a0b08afb612bd692e34722b2d6e89285ecb93eb459fd859a11efcaf0d02172

  • SHA512

    2f2813d82465764faff2be9895f40f414a4b3d455fdf77afc52f2a5e41bee41671df3a39b5594a512c995aa18843d2e6888f99a95ce71f2a059aa098bc30a5b9

  • SSDEEP

    3072:jTXyMaVhFufSFzzgmQ/QvfxPbPyE2Vuv/kbGn/XlNBXz5gh:jOMaDFufgzsG9bP7ZPpD

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      69a0b08afb612bd692e34722b2d6e89285ecb93eb459fd859a11efcaf0d02172

    • Size

      124KB

    • MD5

      5de5bf9ac669bf64752dd5500933ab10

    • SHA1

      1a962cf5ff220b7fa2182c481d77665165a311d4

    • SHA256

      69a0b08afb612bd692e34722b2d6e89285ecb93eb459fd859a11efcaf0d02172

    • SHA512

      2f2813d82465764faff2be9895f40f414a4b3d455fdf77afc52f2a5e41bee41671df3a39b5594a512c995aa18843d2e6888f99a95ce71f2a059aa098bc30a5b9

    • SSDEEP

      3072:jTXyMaVhFufSFzzgmQ/QvfxPbPyE2Vuv/kbGn/XlNBXz5gh:jOMaDFufgzsG9bP7ZPpD

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks