General

  • Target

    0f5b7077c875af324fc69a93ac2c8370N.exe

  • Size

    123KB

  • Sample

    240715-z5dcvszcnk

  • MD5

    0f5b7077c875af324fc69a93ac2c8370

  • SHA1

    229c901b174466050de33e66f7897a5287b9b5ba

  • SHA256

    7149991b8d77ddad38f632a54db516a62c45129f234c811020324f6eda8b5d15

  • SHA512

    3df044844ee00bf959e396ed2344e60787296b507628180e3fe9a940a5f5803b2587ae1c335b95bd1e5d1f9a6e447c1572e0748b97aab0dd975a50ded8dd7d33

  • SSDEEP

    3072:9nDmSqMY8veTn38jvLrdxJJHn50rL4c1zvTcd:hDmSq4WnGd/0H

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      0f5b7077c875af324fc69a93ac2c8370N.exe

    • Size

      123KB

    • MD5

      0f5b7077c875af324fc69a93ac2c8370

    • SHA1

      229c901b174466050de33e66f7897a5287b9b5ba

    • SHA256

      7149991b8d77ddad38f632a54db516a62c45129f234c811020324f6eda8b5d15

    • SHA512

      3df044844ee00bf959e396ed2344e60787296b507628180e3fe9a940a5f5803b2587ae1c335b95bd1e5d1f9a6e447c1572e0748b97aab0dd975a50ded8dd7d33

    • SSDEEP

      3072:9nDmSqMY8veTn38jvLrdxJJHn50rL4c1zvTcd:hDmSq4WnGd/0H

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks