Overview

overview

10

Static

static

3

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    8e2bafa13c1db2683585b6ae8ee38d7ca6d9978e6860ab4f2a37a5131dcb1e9b

  • Size

    125KB

  • Sample

    240715-pce1wa1fkb

  • MD5

    49ebd2a864428e66eac0158802ccda11

  • SHA1

    d1edac701bff24550dd2d1fda7c246b1f2d62f7b

  • SHA256

    8e2bafa13c1db2683585b6ae8ee38d7ca6d9978e6860ab4f2a37a5131dcb1e9b

  • SHA512

    beed35978ebc7b56dfe3b244047acc5e9a8b76ce3f9046e7844e4bc07f74267749bca80d767c725e96a8aa29b9abac0df946a71474f5419bd57059369280dd91

  • SSDEEP

    1536:OYr/HftgcQSyvp+Xf+wz9zSaTfQoF2dHCdCTupFKtg1jLxmB85J3cJ0+j/dVnRSu:T7tgcs5ERQZHC4apF+iLwq3I/dVAy

Score
10/10
strelastealer

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      8e2bafa13c1db2683585b6ae8ee38d7ca6d9978e6860ab4f2a37a5131dcb1e9b

    • Size

      125KB

    • MD5

      49ebd2a864428e66eac0158802ccda11

    • SHA1

      d1edac701bff24550dd2d1fda7c246b1f2d62f7b

    • SHA256

      8e2bafa13c1db2683585b6ae8ee38d7ca6d9978e6860ab4f2a37a5131dcb1e9b

    • SHA512

      beed35978ebc7b56dfe3b244047acc5e9a8b76ce3f9046e7844e4bc07f74267749bca80d767c725e96a8aa29b9abac0df946a71474f5419bd57059369280dd91

    • SSDEEP

      1536:OYr/HftgcQSyvp+Xf+wz9zSaTfQoF2dHCdCTupFKtg1jLxmB85J3cJ0+j/dVnRSu:T7tgcs5ERQZHC4apF+iLwq3I/dVAy

    Score
    10/10
    strelastealer

    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

      stealerstrela
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks