General

  • Target

    d580895511cac8975618c819505408dec923cb6ba0fecebc4c23e6942d649f15

  • Size

    123KB

  • Sample

    240715-pfl9cssdqd

  • MD5

    95d19a31eef170b981555d2afe1135e4

  • SHA1

    4a68e74085bdda1b830bdea515dd7d21610f749f

  • SHA256

    d580895511cac8975618c819505408dec923cb6ba0fecebc4c23e6942d649f15

  • SHA512

    71c471839926a9f20d94d495b66f993228621b9afd75c36ebfe3cc86f2ce5bba17a3ca7e82ff9f7dc29ca54bcdac6016350cee05cf9f251862a70c3747ebe9c1

  • SSDEEP

    3072:O7df9fNRVf3R+3bE/FFCnv4zzyw+6zSx5MthM9Ui2+zvVL9Wv6P11DiOU:W1fNT30rsOz+6kh4Uyvt9W6P1NiO

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      d580895511cac8975618c819505408dec923cb6ba0fecebc4c23e6942d649f15

    • Size

      123KB

    • MD5

      95d19a31eef170b981555d2afe1135e4

    • SHA1

      4a68e74085bdda1b830bdea515dd7d21610f749f

    • SHA256

      d580895511cac8975618c819505408dec923cb6ba0fecebc4c23e6942d649f15

    • SHA512

      71c471839926a9f20d94d495b66f993228621b9afd75c36ebfe3cc86f2ce5bba17a3ca7e82ff9f7dc29ca54bcdac6016350cee05cf9f251862a70c3747ebe9c1

    • SSDEEP

      3072:O7df9fNRVf3R+3bE/FFCnv4zzyw+6zSx5MthM9Ui2+zvVL9Wv6P11DiOU:W1fNT30rsOz+6kh4Uyvt9W6P1NiO

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks