General

  • Target

    09ec10f792c2749fdc5d6ce7dc08b960N.exe

  • Size

    215KB

  • Sample

    240715-zmbfjs1eja

  • MD5

    09ec10f792c2749fdc5d6ce7dc08b960

  • SHA1

    54d779663bc8354025a051bffcbf141555864a95

  • SHA256

    67a0b0f4b0cccbdba4758ec197fe3fca03ca1c30b6b626c9463ad48ede1a8581

  • SHA512

    6cce4af6dd7f06bc2877df46d28d91b8d45aa90f1e2ef06cd0b4718e49c97a82e7e0739054c7d95a8dcbfa6e0a5ac50b80e084b74a7fad7016db5b1bc46f42ca

  • SSDEEP

    6144:3nPsY3Ffvh8EwP2D6duRvm2S4xDUAGp4P4OUB:/sY1fp5LjhxDUIMB

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.176

Attributes
  • url_path

    /server.php

  • user_agent

    Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537

Targets

    • Target

      09ec10f792c2749fdc5d6ce7dc08b960N.exe

    • Size

      215KB

    • MD5

      09ec10f792c2749fdc5d6ce7dc08b960

    • SHA1

      54d779663bc8354025a051bffcbf141555864a95

    • SHA256

      67a0b0f4b0cccbdba4758ec197fe3fca03ca1c30b6b626c9463ad48ede1a8581

    • SHA512

      6cce4af6dd7f06bc2877df46d28d91b8d45aa90f1e2ef06cd0b4718e49c97a82e7e0739054c7d95a8dcbfa6e0a5ac50b80e084b74a7fad7016db5b1bc46f42ca

    • SSDEEP

      6144:3nPsY3Ffvh8EwP2D6duRvm2S4xDUAGp4P4OUB:/sY1fp5LjhxDUIMB

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks