General

  • Target

    25afc0dddf1c07c264f7627ed4ff0392d85fef87dfec33d8a9026a74096eba14

  • Size

    123KB

  • Sample

    240715-prwxyatgmb

  • MD5

    cc3182ed6f10f419c8950d0caf8ed4ac

  • SHA1

    11037ded3759c5562f131f06ca8314f696c3c793

  • SHA256

    25afc0dddf1c07c264f7627ed4ff0392d85fef87dfec33d8a9026a74096eba14

  • SHA512

    009a15b95a09a28989be4230fc5e9c2b00d2ef0580bb5d8367f4eae0a39c58503868bcde2953f23688c32455fa76e6abf19413e90a3e968dbfe1a00c6589befa

  • SSDEEP

    3072:agsZSwp6EFdGqZsViNcu29cKm44E1aCwBxHU:VsZxp6EXGqZci/29cKzaCY

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      25afc0dddf1c07c264f7627ed4ff0392d85fef87dfec33d8a9026a74096eba14

    • Size

      123KB

    • MD5

      cc3182ed6f10f419c8950d0caf8ed4ac

    • SHA1

      11037ded3759c5562f131f06ca8314f696c3c793

    • SHA256

      25afc0dddf1c07c264f7627ed4ff0392d85fef87dfec33d8a9026a74096eba14

    • SHA512

      009a15b95a09a28989be4230fc5e9c2b00d2ef0580bb5d8367f4eae0a39c58503868bcde2953f23688c32455fa76e6abf19413e90a3e968dbfe1a00c6589befa

    • SSDEEP

      3072:agsZSwp6EFdGqZsViNcu29cKm44E1aCwBxHU:VsZxp6EXGqZci/29cKzaCY

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks