General

  • Target

    cda684978a08e255eced81bcbe3e2d495829e8fb20b50dfdc4a4ea79ef03b232

  • Size

    124KB

  • Sample

    240715-prkjxatgka

  • MD5

    62b9e0dd4572f73a45de616d7f56bfd3

  • SHA1

    ed85aa685fe81993a51076c65dc9fb06c70e7437

  • SHA256

    cda684978a08e255eced81bcbe3e2d495829e8fb20b50dfdc4a4ea79ef03b232

  • SHA512

    65478e16446a36e047cf18524a019b07a55b85c563d09f9d01111612bce2ceccebe6fa5c9de14ea69cd924c30b4710b287d2b130f484a2c409f905437e708e7e

  • SSDEEP

    3072:iCA0zq9fDrbiGey425M95LE+jxU2MuchPrIXGQk:i/0zYfDruy425IxzzXGQk

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      cda684978a08e255eced81bcbe3e2d495829e8fb20b50dfdc4a4ea79ef03b232

    • Size

      124KB

    • MD5

      62b9e0dd4572f73a45de616d7f56bfd3

    • SHA1

      ed85aa685fe81993a51076c65dc9fb06c70e7437

    • SHA256

      cda684978a08e255eced81bcbe3e2d495829e8fb20b50dfdc4a4ea79ef03b232

    • SHA512

      65478e16446a36e047cf18524a019b07a55b85c563d09f9d01111612bce2ceccebe6fa5c9de14ea69cd924c30b4710b287d2b130f484a2c409f905437e708e7e

    • SSDEEP

      3072:iCA0zq9fDrbiGey425M95LE+jxU2MuchPrIXGQk:i/0zYfDruy425IxzzXGQk

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks