Overview

overview

10

Static

static

3

cryptolaemus

windows10-2004-x64

10

cryptolaemus

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ed0df9eaa31940af6e08a549e632fc4267848f30bdbcfc2fd8274fc2a3de5c29

  • Size

    123KB

  • Sample

    240715-pehjsazajr

  • MD5

    16ed480ce776bb0b441d55796c031ac4

  • SHA1

    bf94b9f6f3ec1ceba6fe4d5e7fd996293f749100

  • SHA256

    ed0df9eaa31940af6e08a549e632fc4267848f30bdbcfc2fd8274fc2a3de5c29

  • SHA512

    ce377c693bb6c09b590fb1d43f0eb5386c064347e17920728d108087777016833cbbbe9c4d91e73f4c368e86b42fd80ffb37ee6c06369403ed5e158bb2ab3c54

  • SSDEEP

    3072:Spu6WC4S5t8gw+L8+Kid9KIaJnbYelP0uuW84:Cu6WSpL86Wlq

Score
10/10
strelastealer

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      ed0df9eaa31940af6e08a549e632fc4267848f30bdbcfc2fd8274fc2a3de5c29

    • Size

      123KB

    • MD5

      16ed480ce776bb0b441d55796c031ac4

    • SHA1

      bf94b9f6f3ec1ceba6fe4d5e7fd996293f749100

    • SHA256

      ed0df9eaa31940af6e08a549e632fc4267848f30bdbcfc2fd8274fc2a3de5c29

    • SHA512

      ce377c693bb6c09b590fb1d43f0eb5386c064347e17920728d108087777016833cbbbe9c4d91e73f4c368e86b42fd80ffb37ee6c06369403ed5e158bb2ab3c54

    • SSDEEP

      3072:Spu6WC4S5t8gw+L8+Kid9KIaJnbYelP0uuW84:Cu6WSpL86Wlq

    Score
    10/10
    strelastealer

    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

      stealerstrela
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks