General

  • Target

    587a28c6bd0063a7b48f2c6a8b060050N.exe

  • Size

    122KB

  • Sample

    240716-dhj18svcqh

  • MD5

    587a28c6bd0063a7b48f2c6a8b060050

  • SHA1

    17a8cf60287a5a1532978e98a61e3d90705c7a6e

  • SHA256

    c16c3e2c433d8eab544a9d1c4b5573365ac205e9a2c818baeab7b2b2b993ea25

  • SHA512

    79351f96c74564b4b2944c913b4fb7140179066723e02ef592b8a9f7fdcecc4fad6bcb8493729ee47c89080e70f3a94aee73329dd823c9490626c81ae39c9578

  • SSDEEP

    3072:nc+txrkwtvgkYNw2ujfBzCtOs8VRTLd5eLcVpKbbJkwl:ncIhgkYNwhZCtqcpblkwl

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      587a28c6bd0063a7b48f2c6a8b060050N.exe

    • Size

      122KB

    • MD5

      587a28c6bd0063a7b48f2c6a8b060050

    • SHA1

      17a8cf60287a5a1532978e98a61e3d90705c7a6e

    • SHA256

      c16c3e2c433d8eab544a9d1c4b5573365ac205e9a2c818baeab7b2b2b993ea25

    • SHA512

      79351f96c74564b4b2944c913b4fb7140179066723e02ef592b8a9f7fdcecc4fad6bcb8493729ee47c89080e70f3a94aee73329dd823c9490626c81ae39c9578

    • SSDEEP

      3072:nc+txrkwtvgkYNw2ujfBzCtOs8VRTLd5eLcVpKbbJkwl:ncIhgkYNwhZCtqcpblkwl

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks