General

  • Target

    23849161f43860225244a996c19ad8bf638acdd8163f2112cfa191b2c2962763

  • Size

    122KB

  • Sample

    240715-prennatfrf

  • MD5

    c7c476c0015be85c08d57938695fb631

  • SHA1

    0eda64572ac4ed0d3d1fc3c40e799d7531de04c0

  • SHA256

    23849161f43860225244a996c19ad8bf638acdd8163f2112cfa191b2c2962763

  • SHA512

    36ee60f5b643a838e5ad3812d2fc1493e533f66d0e76fa2abdb956c4ff9234810f0dd79bb6c3d8c5aaedbc4a9321a8895c3153cb13fba913581bdb7c8650dd66

  • SSDEEP

    3072:A1Y6dCOGMq3T9MUM6/ueao5OsTVjnpLBB3PPilduarkxLS86mPB:Ae6dn/UMcxV0p2

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      23849161f43860225244a996c19ad8bf638acdd8163f2112cfa191b2c2962763

    • Size

      122KB

    • MD5

      c7c476c0015be85c08d57938695fb631

    • SHA1

      0eda64572ac4ed0d3d1fc3c40e799d7531de04c0

    • SHA256

      23849161f43860225244a996c19ad8bf638acdd8163f2112cfa191b2c2962763

    • SHA512

      36ee60f5b643a838e5ad3812d2fc1493e533f66d0e76fa2abdb956c4ff9234810f0dd79bb6c3d8c5aaedbc4a9321a8895c3153cb13fba913581bdb7c8650dd66

    • SSDEEP

      3072:A1Y6dCOGMq3T9MUM6/ueao5OsTVjnpLBB3PPilduarkxLS86mPB:Ae6dn/UMcxV0p2

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks