Overview

overview

10

Static

static

3

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    532b2678a77f997d94c0f2bf5f4fc8a9215f147b8d1bbc5b5e5d9f7c25cb9596

  • Size

    124KB

  • Sample

    240715-pdmr4s1hrf

  • MD5

    78a909b3ad6bbe03a0fbad899f6983c2

  • SHA1

    034a1b1f29c43bf10e7dedf2dd3d94ab5ad2e02e

  • SHA256

    532b2678a77f997d94c0f2bf5f4fc8a9215f147b8d1bbc5b5e5d9f7c25cb9596

  • SHA512

    df36180f4086d471ed3d8c55f1a40ec9279b020d0da2dd049b023bbbdf102d918c0f34903d0423f414f54c031edd72e8fa67bb253a02a4ccf08db252518f17d2

  • SSDEEP

    3072:JRgum4+i33u0RjhXT/DSHfbqKtGWOYYkqeJ0j5aH/HD:JRrmV4+ijp7QqSGu1qeJrH/HD

Score
10/10
strelastealer

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      532b2678a77f997d94c0f2bf5f4fc8a9215f147b8d1bbc5b5e5d9f7c25cb9596

    • Size

      124KB

    • MD5

      78a909b3ad6bbe03a0fbad899f6983c2

    • SHA1

      034a1b1f29c43bf10e7dedf2dd3d94ab5ad2e02e

    • SHA256

      532b2678a77f997d94c0f2bf5f4fc8a9215f147b8d1bbc5b5e5d9f7c25cb9596

    • SHA512

      df36180f4086d471ed3d8c55f1a40ec9279b020d0da2dd049b023bbbdf102d918c0f34903d0423f414f54c031edd72e8fa67bb253a02a4ccf08db252518f17d2

    • SSDEEP

      3072:JRgum4+i33u0RjhXT/DSHfbqKtGWOYYkqeJ0j5aH/HD:JRrmV4+ijp7QqSGu1qeJrH/HD

    Score
    10/10
    strelastealer

    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

      stealerstrela
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks