General

  • Target

    5a349282344f673cb5ea1937da11df5ea707eb95d4fb5e0f02a69114b8a1c18f

  • Size

    124KB

  • Sample

    240715-pr6r5s1fmq

  • MD5

    a991483012bec1f04a90b0879afa597d

  • SHA1

    bee477b7e5bca36c999c799eee8678b4d443c546

  • SHA256

    5a349282344f673cb5ea1937da11df5ea707eb95d4fb5e0f02a69114b8a1c18f

  • SHA512

    10b3be736ed0461fc3d2dbdb82d88e01b94ceab2069e14145d5d816be0b73d28180eb1b17b7aed4cfbdf851d015f2a9c2764d8d909b5632dbaf2a7734e3eacca

  • SSDEEP

    3072:vS+G1oak17VpG1Ntg/JJO12kA7B0XyDGInUjD1Gk:q+G1i17a6/JJy2T90CDGljD

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      5a349282344f673cb5ea1937da11df5ea707eb95d4fb5e0f02a69114b8a1c18f

    • Size

      124KB

    • MD5

      a991483012bec1f04a90b0879afa597d

    • SHA1

      bee477b7e5bca36c999c799eee8678b4d443c546

    • SHA256

      5a349282344f673cb5ea1937da11df5ea707eb95d4fb5e0f02a69114b8a1c18f

    • SHA512

      10b3be736ed0461fc3d2dbdb82d88e01b94ceab2069e14145d5d816be0b73d28180eb1b17b7aed4cfbdf851d015f2a9c2764d8d909b5632dbaf2a7734e3eacca

    • SSDEEP

      3072:vS+G1oak17VpG1Ntg/JJO12kA7B0XyDGInUjD1Gk:q+G1i17a6/JJy2T90CDGljD

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks