General

  • Target

    34b6da20d7cfd1c0ed8964cba073f4ade885ff97d85aaa8d3446fece48cf9fe1

  • Size

    124KB

  • Sample

    240715-prb8ja1eql

  • MD5

    a6c37c8125029aedd27718732d13e6f9

  • SHA1

    774e2e0c6bfd4c2ac1fb74876978c75953991d81

  • SHA256

    34b6da20d7cfd1c0ed8964cba073f4ade885ff97d85aaa8d3446fece48cf9fe1

  • SHA512

    138a0442cc7f53b9c0b7fe53928ab0379276bbfe73ec56ea3ebfa7c48bb58629926e4057616f2a4e0a16fc3e63b74dd45a7bac38cf4767411640a98e9f2945c9

  • SSDEEP

    3072:3FWEPpx2Z5ymNwwNrj9QvRCzXTtZ7TxXLIfbH:VWEP+Z5ymNwg/9yRCTn7TxXMfb

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      34b6da20d7cfd1c0ed8964cba073f4ade885ff97d85aaa8d3446fece48cf9fe1

    • Size

      124KB

    • MD5

      a6c37c8125029aedd27718732d13e6f9

    • SHA1

      774e2e0c6bfd4c2ac1fb74876978c75953991d81

    • SHA256

      34b6da20d7cfd1c0ed8964cba073f4ade885ff97d85aaa8d3446fece48cf9fe1

    • SHA512

      138a0442cc7f53b9c0b7fe53928ab0379276bbfe73ec56ea3ebfa7c48bb58629926e4057616f2a4e0a16fc3e63b74dd45a7bac38cf4767411640a98e9f2945c9

    • SSDEEP

      3072:3FWEPpx2Z5ymNwwNrj9QvRCzXTtZ7TxXLIfbH:VWEP+Z5ymNwg/9yRCTn7TxXMfb

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks