General

  • Target

    235196f311bb19a3601810381572c97023063e13875d152e71433649a0310d22

  • Size

    125KB

  • Sample

    240715-pg5r4azeqm

  • MD5

    4823865482baaec7993bbcb4abbd6cdb

  • SHA1

    df311898669338acc67da79e2f03901773ef42c7

  • SHA256

    235196f311bb19a3601810381572c97023063e13875d152e71433649a0310d22

  • SHA512

    4796f3e69cc28bac87ca9e142ad34a0b2d8854485100665fe195ff878f376a6ba74bee59f5f8f8a35d1f733338562da686744b4b366043d59d7d1b34d6dabdd1

  • SSDEEP

    3072:vYYvTpJL/Xcyh7+yRmhltfgqhSxJdPFN3BC:AYRbcyR4fGxJJTBC

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      235196f311bb19a3601810381572c97023063e13875d152e71433649a0310d22

    • Size

      125KB

    • MD5

      4823865482baaec7993bbcb4abbd6cdb

    • SHA1

      df311898669338acc67da79e2f03901773ef42c7

    • SHA256

      235196f311bb19a3601810381572c97023063e13875d152e71433649a0310d22

    • SHA512

      4796f3e69cc28bac87ca9e142ad34a0b2d8854485100665fe195ff878f376a6ba74bee59f5f8f8a35d1f733338562da686744b4b366043d59d7d1b34d6dabdd1

    • SSDEEP

      3072:vYYvTpJL/Xcyh7+yRmhltfgqhSxJdPFN3BC:AYRbcyR4fGxJJTBC

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks