General

  • Target

    7b859940a5df8477aaab96a79cf05887c7c0fd2c88849d5ebf4985798defa075

  • Size

    125KB

  • Sample

    240715-prnxbstglb

  • MD5

    465c59cf2bc369b98ec170ca91cfa6a3

  • SHA1

    d6b68053b0b4b5575f51e83d28e31e3bbdae1fa2

  • SHA256

    7b859940a5df8477aaab96a79cf05887c7c0fd2c88849d5ebf4985798defa075

  • SHA512

    2962e5f66d3b6861cdecdac33b97102e2920cefdffbbae52d7bcad450c72d450a5887eb821e3719355d8a1986953f6944ce363bcecbb59058a4a1368c35281f2

  • SSDEEP

    3072:DZcfr6uPdTaB8NqzMjgMR+jPQE+/mRKZF0shlx:DZYrdgUPFR8QEQmel

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      7b859940a5df8477aaab96a79cf05887c7c0fd2c88849d5ebf4985798defa075

    • Size

      125KB

    • MD5

      465c59cf2bc369b98ec170ca91cfa6a3

    • SHA1

      d6b68053b0b4b5575f51e83d28e31e3bbdae1fa2

    • SHA256

      7b859940a5df8477aaab96a79cf05887c7c0fd2c88849d5ebf4985798defa075

    • SHA512

      2962e5f66d3b6861cdecdac33b97102e2920cefdffbbae52d7bcad450c72d450a5887eb821e3719355d8a1986953f6944ce363bcecbb59058a4a1368c35281f2

    • SSDEEP

      3072:DZcfr6uPdTaB8NqzMjgMR+jPQE+/mRKZF0shlx:DZYrdgUPFR8QEQmel

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks