General

  • Target

    2a4c48c4bb996115f5716e9297541d5c1393454ddd2f62311b21b74ce0915e5b

  • Size

    123KB

  • Sample

    240715-pdm3wa1hrg

  • MD5

    ea3a48e794b83d3650d2f501b696fecb

  • SHA1

    85f7b4c351cf191f76784cb35f00dfd05b2f8653

  • SHA256

    2a4c48c4bb996115f5716e9297541d5c1393454ddd2f62311b21b74ce0915e5b

  • SHA512

    42245a533edfcbefde850fcc98def24156152f9157d0c437c022be48f91f4722af2bb665fc6a3cfbfd46f45bf71995178eea338dd46d429d784b29044b6939a3

  • SSDEEP

    3072:hSwM8E3BY60WmuN5MZXY679dnHP+DCmKNDB3hBz/1CIK:hSwMPXqi5gXv75mKPhBJ

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      2a4c48c4bb996115f5716e9297541d5c1393454ddd2f62311b21b74ce0915e5b

    • Size

      123KB

    • MD5

      ea3a48e794b83d3650d2f501b696fecb

    • SHA1

      85f7b4c351cf191f76784cb35f00dfd05b2f8653

    • SHA256

      2a4c48c4bb996115f5716e9297541d5c1393454ddd2f62311b21b74ce0915e5b

    • SHA512

      42245a533edfcbefde850fcc98def24156152f9157d0c437c022be48f91f4722af2bb665fc6a3cfbfd46f45bf71995178eea338dd46d429d784b29044b6939a3

    • SSDEEP

      3072:hSwM8E3BY60WmuN5MZXY679dnHP+DCmKNDB3hBz/1CIK:hSwMPXqi5gXv75mKPhBJ

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks