Overview

overview

10

Static

static

3

3385081a5a...0N.dll

windows7-x64

10

3385081a5a...0N.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3385081a5aaf3d6112b465e96fe97be0N.exe

  • Size

    124KB

  • Sample

    240716-adjm5aydkf

  • MD5

    3385081a5aaf3d6112b465e96fe97be0

  • SHA1

    39fdceedd49da68773d41add96269a75c9441676

  • SHA256

    04b6aac19b9d716d1c8b82c6905d335ed4a3ce3f1a897382979e154455cc98cf

  • SHA512

    d70bbd112424ce809720d4541254becc2250ea41ff50175315ae648e6ac22c834805d777d144cbb278f8cd8a8b347df29bdcd823e1b4219207f03cd2c6fd4047

  • SSDEEP

    3072:N0ctegiHi324CCk/VLQh7mbu2A/9WOgXLClyeVK7LJc:NTYCk/NQpmM1WOgV64L2

Score
10/10
strelastealer

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      3385081a5aaf3d6112b465e96fe97be0N.exe

    • Size

      124KB

    • MD5

      3385081a5aaf3d6112b465e96fe97be0

    • SHA1

      39fdceedd49da68773d41add96269a75c9441676

    • SHA256

      04b6aac19b9d716d1c8b82c6905d335ed4a3ce3f1a897382979e154455cc98cf

    • SHA512

      d70bbd112424ce809720d4541254becc2250ea41ff50175315ae648e6ac22c834805d777d144cbb278f8cd8a8b347df29bdcd823e1b4219207f03cd2c6fd4047

    • SSDEEP

      3072:N0ctegiHi324CCk/VLQh7mbu2A/9WOgXLClyeVK7LJc:NTYCk/NQpmM1WOgV64L2

    Score
    10/10
    strelastealer

    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

      stealerstrela
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks