General

  • Target

    d2b9bcf56690d0ad338d0b3dd8b24e60N.exe

  • Size

    125KB

  • Sample

    240715-ny9lyaxgjf

  • MD5

    d2b9bcf56690d0ad338d0b3dd8b24e60

  • SHA1

    1d2785e5137c97fdac3ced570e219b59e13ffb1e

  • SHA256

    eecd4b85e09fd826fcb401afddca1ecde0c5614893647e4fd743032799eebb32

  • SHA512

    02279967c352484c8d6fd25eddd9a2166c9a10651e63e9fea36ff85cfef21cff88d4bc8670fccac4d4a01e84f852ef4a62f38655089b06565d8eb94c6db57729

  • SSDEEP

    3072:hbFz82T6uLBiho/ROf5rn/5Pn/5Jyk4PFTe9m+:hZz82vL0haROBlHXn4If

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      d2b9bcf56690d0ad338d0b3dd8b24e60N.exe

    • Size

      125KB

    • MD5

      d2b9bcf56690d0ad338d0b3dd8b24e60

    • SHA1

      1d2785e5137c97fdac3ced570e219b59e13ffb1e

    • SHA256

      eecd4b85e09fd826fcb401afddca1ecde0c5614893647e4fd743032799eebb32

    • SHA512

      02279967c352484c8d6fd25eddd9a2166c9a10651e63e9fea36ff85cfef21cff88d4bc8670fccac4d4a01e84f852ef4a62f38655089b06565d8eb94c6db57729

    • SSDEEP

      3072:hbFz82T6uLBiho/ROf5rn/5Pn/5Jyk4PFTe9m+:hZz82vL0haROBlHXn4If

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks