General

  • Target

    da633431d0d332dbed81bbd9ce2ee570N.exe

  • Size

    123KB

  • Sample

    240715-prskhs1fkm

  • MD5

    da633431d0d332dbed81bbd9ce2ee570

  • SHA1

    120ddd724e0945878e0624aa220abd3bb956d4e4

  • SHA256

    3171ca876e99df98dfb8ee4f2bb8b9ee1f53b035bf8be10d6140ae6a904ad809

  • SHA512

    5856e812e484f2ff146ed8b69bd80c41100cd06d2e7b0cb5e540dd2a32fa52fb730391494cb6d5a94c6086183bff0dfbc7f2f93ecc82363e55b98a9506aec2c5

  • SSDEEP

    3072:hqn4igT1FSQWZnpQA8XhgiCgXCm3Txe/DAbkrtWAbVDrb:hq8RF4ZpGDeAD+v

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      da633431d0d332dbed81bbd9ce2ee570N.exe

    • Size

      123KB

    • MD5

      da633431d0d332dbed81bbd9ce2ee570

    • SHA1

      120ddd724e0945878e0624aa220abd3bb956d4e4

    • SHA256

      3171ca876e99df98dfb8ee4f2bb8b9ee1f53b035bf8be10d6140ae6a904ad809

    • SHA512

      5856e812e484f2ff146ed8b69bd80c41100cd06d2e7b0cb5e540dd2a32fa52fb730391494cb6d5a94c6086183bff0dfbc7f2f93ecc82363e55b98a9506aec2c5

    • SSDEEP

      3072:hqn4igT1FSQWZnpQA8XhgiCgXCm3Txe/DAbkrtWAbVDrb:hq8RF4ZpGDeAD+v

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks