General

  • Target

    0f40564b04e0f818d0ce188ef332a6d41e4b5ed23bddf716fe42edcf76252463

  • Size

    124KB

  • Sample

    240715-pr4b1s1flp

  • MD5

    006196d8f209d0a69d754c0ac499bd28

  • SHA1

    96faf55bfe304aca58a88130bd424836fb884502

  • SHA256

    0f40564b04e0f818d0ce188ef332a6d41e4b5ed23bddf716fe42edcf76252463

  • SHA512

    13b4678d2c343df681f0c2a28623bff0f256b47269cf914b64e0a1f7ea1114748e8a14b4ae27ec1e2b05236120ca7ce8a644508144fd563009f29bbc64a95c13

  • SSDEEP

    3072:p/OhFMpM0uq3nZiGPmlPYWihtCzbycbi1s67Nk9YRSl1rTuKr:xRuq3nsGPsFihtAbyEirWYGr

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      0f40564b04e0f818d0ce188ef332a6d41e4b5ed23bddf716fe42edcf76252463

    • Size

      124KB

    • MD5

      006196d8f209d0a69d754c0ac499bd28

    • SHA1

      96faf55bfe304aca58a88130bd424836fb884502

    • SHA256

      0f40564b04e0f818d0ce188ef332a6d41e4b5ed23bddf716fe42edcf76252463

    • SHA512

      13b4678d2c343df681f0c2a28623bff0f256b47269cf914b64e0a1f7ea1114748e8a14b4ae27ec1e2b05236120ca7ce8a644508144fd563009f29bbc64a95c13

    • SSDEEP

      3072:p/OhFMpM0uq3nZiGPmlPYWihtCzbycbi1s67Nk9YRSl1rTuKr:xRuq3nsGPsFihtAbyEirWYGr

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks