Overview

overview

10

Static

static

3

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    581fe2ae1dd054d584093d440df3f36ec2e62fa9ff673796353b7342bba56d9a

  • Size

    123KB

  • Sample

    240715-pas5qa1bka

  • MD5

    6395685905c256888571c4eb93b8be6b

  • SHA1

    b6a4939381edc2ecb90590e14b68d8e247347653

  • SHA256

    581fe2ae1dd054d584093d440df3f36ec2e62fa9ff673796353b7342bba56d9a

  • SHA512

    5cad30baf0d9853049fc55e876630ae7ac3c9b89564d4e5feb64427bd02d02a266f181b6a294068318493ee1d8d315fc3e08345becccf70a523f8f2d6792e311

  • SSDEEP

    3072:GzLQqGP6VDIcbbFbJ4/hFGg6McmNTbzs3uNxsNIhItvQ:GUODzE/HG96Nbzsz

Score
10/10
strelastealer

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      581fe2ae1dd054d584093d440df3f36ec2e62fa9ff673796353b7342bba56d9a

    • Size

      123KB

    • MD5

      6395685905c256888571c4eb93b8be6b

    • SHA1

      b6a4939381edc2ecb90590e14b68d8e247347653

    • SHA256

      581fe2ae1dd054d584093d440df3f36ec2e62fa9ff673796353b7342bba56d9a

    • SHA512

      5cad30baf0d9853049fc55e876630ae7ac3c9b89564d4e5feb64427bd02d02a266f181b6a294068318493ee1d8d315fc3e08345becccf70a523f8f2d6792e311

    • SSDEEP

      3072:GzLQqGP6VDIcbbFbJ4/hFGg6McmNTbzs3uNxsNIhItvQ:GUODzE/HG96Nbzsz

    Score
    10/10
    strelastealer

    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

      stealerstrela
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks