General

  • Target

    2a72cbdc823cac955e5137f87444e265953b53e0043d556b5b5e1e7937a3f47e

  • Size

    123KB

  • Sample

    240715-pcltes1fne

  • MD5

    867e27bc7bf92de7cd4cc533d2d59c13

  • SHA1

    66679541b17a10de9c56f589309a611832a4fe3b

  • SHA256

    2a72cbdc823cac955e5137f87444e265953b53e0043d556b5b5e1e7937a3f47e

  • SHA512

    76712aa114eb4867223985435e34608d7fbfd4055c4b7d435e2e2e610091f438aae42c1d5ae07dfd39cfdf3308a840d8a30f0b369744533eedcfa09a1eb8f06b

  • SSDEEP

    3072:nbzIK9VfAoxrNuiaoc4svD4rK9qETR/0UPy1:bUroJYjr4X+9qq/0Ue

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      2a72cbdc823cac955e5137f87444e265953b53e0043d556b5b5e1e7937a3f47e

    • Size

      123KB

    • MD5

      867e27bc7bf92de7cd4cc533d2d59c13

    • SHA1

      66679541b17a10de9c56f589309a611832a4fe3b

    • SHA256

      2a72cbdc823cac955e5137f87444e265953b53e0043d556b5b5e1e7937a3f47e

    • SHA512

      76712aa114eb4867223985435e34608d7fbfd4055c4b7d435e2e2e610091f438aae42c1d5ae07dfd39cfdf3308a840d8a30f0b369744533eedcfa09a1eb8f06b

    • SSDEEP

      3072:nbzIK9VfAoxrNuiaoc4svD4rK9qETR/0UPy1:bUroJYjr4X+9qq/0Ue

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks