Overview

overview

10

Static

static

3

3657cb3b80...0N.dll

windows7-x64

10

3657cb3b80...0N.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3657cb3b80a9c4e5c036159d03c0b340N.exe

  • Size

    127KB

  • Sample

    240716-al3e7swemp

  • MD5

    3657cb3b80a9c4e5c036159d03c0b340

  • SHA1

    8b83a1efcf8723904b6b4c880db48779ae22f18e

  • SHA256

    632b134ce4cea965637df912d0402b98998feafb9bb2cd860efaf891cf34cb94

  • SHA512

    dd52c17dd36f2b9914e0cf9a15df441944b136c7d3620fb500d0d2932ba3aee9cc9bacd86b8a1eafc94445a300df6f482b8470d07914c6f6f2de1d7e6ef6e095

  • SSDEEP

    3072:MUcNjkUaHKYZhU7cEZm8yVk9ZWNTIHYw:MDgHp6WyZWND

Score
10/10
strelastealer

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      3657cb3b80a9c4e5c036159d03c0b340N.exe

    • Size

      127KB

    • MD5

      3657cb3b80a9c4e5c036159d03c0b340

    • SHA1

      8b83a1efcf8723904b6b4c880db48779ae22f18e

    • SHA256

      632b134ce4cea965637df912d0402b98998feafb9bb2cd860efaf891cf34cb94

    • SHA512

      dd52c17dd36f2b9914e0cf9a15df441944b136c7d3620fb500d0d2932ba3aee9cc9bacd86b8a1eafc94445a300df6f482b8470d07914c6f6f2de1d7e6ef6e095

    • SSDEEP

      3072:MUcNjkUaHKYZhU7cEZm8yVk9ZWNTIHYw:MDgHp6WyZWND

    Score
    10/10
    strelastealer

    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

      stealerstrela
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks