General

  • Target

    5a0425997b9fc505e699f8f0f4bf4e00N.exe

  • Size

    122KB

  • Sample

    240716-dmvnjascpk

  • MD5

    5a0425997b9fc505e699f8f0f4bf4e00

  • SHA1

    7a708a0a9191d7ff8fdae3eb9e79dc1ecfd9ddcb

  • SHA256

    ed438c9930880d7ceae428b203b6a56fcfa5767dcd66aa0fd127dda19689cb52

  • SHA512

    3c070c324a5f030d23b3eb75527f8e0ac0f63290e8ddda9ce196b91181807210e6ef27c52928274b8c28f93ba665b3c7f62b884a52fa5b165e20479024704aaf

  • SSDEEP

    3072:Q29exVR79RQqNdVzU2/BFlOvzl5wPY4y4j6JDcAB:QtZ51BM5k0jJB

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      5a0425997b9fc505e699f8f0f4bf4e00N.exe

    • Size

      122KB

    • MD5

      5a0425997b9fc505e699f8f0f4bf4e00

    • SHA1

      7a708a0a9191d7ff8fdae3eb9e79dc1ecfd9ddcb

    • SHA256

      ed438c9930880d7ceae428b203b6a56fcfa5767dcd66aa0fd127dda19689cb52

    • SHA512

      3c070c324a5f030d23b3eb75527f8e0ac0f63290e8ddda9ce196b91181807210e6ef27c52928274b8c28f93ba665b3c7f62b884a52fa5b165e20479024704aaf

    • SSDEEP

      3072:Q29exVR79RQqNdVzU2/BFlOvzl5wPY4y4j6JDcAB:QtZ51BM5k0jJB

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks