Overview

overview

10

Static

static

3

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    289805389cfecf8adf608e863ec5e02f8d4f77f626eef8afef13923c49f88c23

  • Size

    124KB

  • Sample

    240715-pccwhs1erd

  • MD5

    d61775c4157f9864c588482ea18fb744

  • SHA1

    d45a68cbe88e875f99605541000b11c328661d6c

  • SHA256

    289805389cfecf8adf608e863ec5e02f8d4f77f626eef8afef13923c49f88c23

  • SHA512

    c305c87430763e5ac56051cfbf48d0410d0c4e2be79fb193ab44743b0fbaa9a0c1d26fa97c96f66446758b1795ec4cb9ca4e809ed286aa2a19d13867faf49af6

  • SSDEEP

    3072:QWYMqv21vjvTihvURA0vRokMGZEzUkftH8mpRdlmA:EO1rLJdakZOUkftJRK

Score
10/10
strelastealer

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      289805389cfecf8adf608e863ec5e02f8d4f77f626eef8afef13923c49f88c23

    • Size

      124KB

    • MD5

      d61775c4157f9864c588482ea18fb744

    • SHA1

      d45a68cbe88e875f99605541000b11c328661d6c

    • SHA256

      289805389cfecf8adf608e863ec5e02f8d4f77f626eef8afef13923c49f88c23

    • SHA512

      c305c87430763e5ac56051cfbf48d0410d0c4e2be79fb193ab44743b0fbaa9a0c1d26fa97c96f66446758b1795ec4cb9ca4e809ed286aa2a19d13867faf49af6

    • SSDEEP

      3072:QWYMqv21vjvTihvURA0vRokMGZEzUkftH8mpRdlmA:EO1rLJdakZOUkftJRK

    Score
    10/10
    strelastealer

    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

      stealerstrela
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks