General

  • Target

    5f3e6652abe5e06be4bc2c979fb98b00N.exe

  • Size

    122KB

  • Sample

    240716-d4mz1swcla

  • MD5

    5f3e6652abe5e06be4bc2c979fb98b00

  • SHA1

    a434335ae2da4bc44ae10a56fbfb7cea64fe0b1a

  • SHA256

    55976dd70c0bf3d435d7571416aaf4783d03b8bb37f2e9580654b10b9b664605

  • SHA512

    0627098cf70ccb137940ab1fa9013bd693f3d5176077c456982a4390e1e520fd9df9d529fa04478d1bd5961e58aadb1d6bfc0bf93591786751c903a5ca0c9dbb

  • SSDEEP

    3072:e5zhSqWT2HefbMHavlkPlrrrXOkWNhD0CWhwVbaCtRa/RT16tOt:e5zhSvTKefbM60jMhDBWhwVuCtRa/RkG

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      5f3e6652abe5e06be4bc2c979fb98b00N.exe

    • Size

      122KB

    • MD5

      5f3e6652abe5e06be4bc2c979fb98b00

    • SHA1

      a434335ae2da4bc44ae10a56fbfb7cea64fe0b1a

    • SHA256

      55976dd70c0bf3d435d7571416aaf4783d03b8bb37f2e9580654b10b9b664605

    • SHA512

      0627098cf70ccb137940ab1fa9013bd693f3d5176077c456982a4390e1e520fd9df9d529fa04478d1bd5961e58aadb1d6bfc0bf93591786751c903a5ca0c9dbb

    • SSDEEP

      3072:e5zhSqWT2HefbMHavlkPlrrrXOkWNhD0CWhwVbaCtRa/RT16tOt:e5zhSvTKefbM60jMhDBWhwVuCtRa/RkG

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks