General

  • Target

    bdcbcff33119c78cf1988e50df9e6c6123f934c71e82ed3e5fda7817d642f06e

  • Size

    122KB

  • Sample

    240715-paxg5s1blg

  • MD5

    06331132ed201764519c22266f127a37

  • SHA1

    b55dbae5504201e2e5db87afdfdb34391fc7265e

  • SHA256

    bdcbcff33119c78cf1988e50df9e6c6123f934c71e82ed3e5fda7817d642f06e

  • SHA512

    4fb5c4b1f64f5a9b63b21394bf26faaef3b64210d7538fef35c34b2a2c06ac0fa1e1b6df443631d79a8a55a5352fc32342c24bb4a2ef168f07ee5d7f6afc5f79

  • SSDEEP

    3072:HV4U8f3xXiyy3jxVH6FhKoT6OmWD/ES78H7qNvdJ:HeThX2jxp63Ko+OT/Es

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      bdcbcff33119c78cf1988e50df9e6c6123f934c71e82ed3e5fda7817d642f06e

    • Size

      122KB

    • MD5

      06331132ed201764519c22266f127a37

    • SHA1

      b55dbae5504201e2e5db87afdfdb34391fc7265e

    • SHA256

      bdcbcff33119c78cf1988e50df9e6c6123f934c71e82ed3e5fda7817d642f06e

    • SHA512

      4fb5c4b1f64f5a9b63b21394bf26faaef3b64210d7538fef35c34b2a2c06ac0fa1e1b6df443631d79a8a55a5352fc32342c24bb4a2ef168f07ee5d7f6afc5f79

    • SSDEEP

      3072:HV4U8f3xXiyy3jxVH6FhKoT6OmWD/ES78H7qNvdJ:HeThX2jxp63Ko+OT/Es

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks