General

  • Target

    50ebe2fe1ed0e94ffb10d48b0f500f159f48eae0bc47d823b1ffee3122e23468

  • Size

    125KB

  • Sample

    240715-paxg5sxhqj

  • MD5

    2387bbef8f7eae7130b0e5ac6d8ac3b6

  • SHA1

    d03652eb1f8f2eea2c9ef07df15d375ecddb057d

  • SHA256

    50ebe2fe1ed0e94ffb10d48b0f500f159f48eae0bc47d823b1ffee3122e23468

  • SHA512

    7330b6beccc0ec523f6633a919c0489e0a2bbb213f92634e170231603e3cc931537dcbfaec3c3c6054cfa7e062d42c32600e5122d5d5ccff3b5eeec268e300d2

  • SSDEEP

    3072:Z/l9dp9Z8ilYb4jKw31wpmWuwtXsKD7ffKnt4b8:llrZ8iyEmw31atXZLfE4

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      50ebe2fe1ed0e94ffb10d48b0f500f159f48eae0bc47d823b1ffee3122e23468

    • Size

      125KB

    • MD5

      2387bbef8f7eae7130b0e5ac6d8ac3b6

    • SHA1

      d03652eb1f8f2eea2c9ef07df15d375ecddb057d

    • SHA256

      50ebe2fe1ed0e94ffb10d48b0f500f159f48eae0bc47d823b1ffee3122e23468

    • SHA512

      7330b6beccc0ec523f6633a919c0489e0a2bbb213f92634e170231603e3cc931537dcbfaec3c3c6054cfa7e062d42c32600e5122d5d5ccff3b5eeec268e300d2

    • SSDEEP

      3072:Z/l9dp9Z8ilYb4jKw31wpmWuwtXsKD7ffKnt4b8:llrZ8iyEmw31atXZLfE4

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks