General

  • Target

    bb8ac3e95d182747890b3f0041b089b4bf1518ec6f0d6734d8d62dbf9203db3a

  • Size

    124KB

  • Sample

    240715-pbcjcsyaqj

  • MD5

    9084bdb6e8c2cf66fa536fa82b7635d4

  • SHA1

    cbf792183d1ffa7b4249422d4ba8772e98583c0e

  • SHA256

    bb8ac3e95d182747890b3f0041b089b4bf1518ec6f0d6734d8d62dbf9203db3a

  • SHA512

    2e13e205f2bb0fe19215db509f63497f2021799a4415aeb0245e79ea1c259d7a7f48b63d60cdf16e1bd038132250c5eceececc433ea9795eaef497ab83f925c2

  • SSDEEP

    3072:G+qYdmNDnMCLpfI/8KXuow8t8oMGhuKI/l+E/m5+t3:4Y8lMoQRhyYW/4

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      bb8ac3e95d182747890b3f0041b089b4bf1518ec6f0d6734d8d62dbf9203db3a

    • Size

      124KB

    • MD5

      9084bdb6e8c2cf66fa536fa82b7635d4

    • SHA1

      cbf792183d1ffa7b4249422d4ba8772e98583c0e

    • SHA256

      bb8ac3e95d182747890b3f0041b089b4bf1518ec6f0d6734d8d62dbf9203db3a

    • SHA512

      2e13e205f2bb0fe19215db509f63497f2021799a4415aeb0245e79ea1c259d7a7f48b63d60cdf16e1bd038132250c5eceececc433ea9795eaef497ab83f925c2

    • SSDEEP

      3072:G+qYdmNDnMCLpfI/8KXuow8t8oMGhuKI/l+E/m5+t3:4Y8lMoQRhyYW/4

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks