General

  • Target

    5407f452df5d24517d7d2e3d97334770N.exe

  • Size

    124KB

  • Sample

    240716-c5t92s1emp

  • MD5

    5407f452df5d24517d7d2e3d97334770

  • SHA1

    40800a452366b2c521c2e7ebaf76036b29b9c7de

  • SHA256

    a23de4531a16a1af7c71d7b36755605e01f1b35930a94ec32570fdfea2fab1f1

  • SHA512

    eb33dd103de0066ed4ad4d3a6cdcadae801234f837ca0cef1016266dc2555b6a394e450ab67310e59ab10d4bdda9d97fb845dbfb12a35039e48284f66bb5fc4f

  • SSDEEP

    3072:gQuPc0KGyDFao+H+O6sFrzuK1x1jooVMakj6QeN:GUvdDMf++raaxF7aC

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      5407f452df5d24517d7d2e3d97334770N.exe

    • Size

      124KB

    • MD5

      5407f452df5d24517d7d2e3d97334770

    • SHA1

      40800a452366b2c521c2e7ebaf76036b29b9c7de

    • SHA256

      a23de4531a16a1af7c71d7b36755605e01f1b35930a94ec32570fdfea2fab1f1

    • SHA512

      eb33dd103de0066ed4ad4d3a6cdcadae801234f837ca0cef1016266dc2555b6a394e450ab67310e59ab10d4bdda9d97fb845dbfb12a35039e48284f66bb5fc4f

    • SSDEEP

      3072:gQuPc0KGyDFao+H+O6sFrzuK1x1jooVMakj6QeN:GUvdDMf++raaxF7aC

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks