Overview

overview

10

Static

static

3

5bfd80d6a3...0N.dll

windows7-x64

10

5bfd80d6a3...0N.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5bfd80d6a3bcc37ade665e165b3b1940N.exe

  • Size

    125KB

  • Sample

    240716-dsd8qsselr

  • MD5

    5bfd80d6a3bcc37ade665e165b3b1940

  • SHA1

    e393b1a2d5e93e504d497a485daa2b9833127052

  • SHA256

    65d7461b6b16d4f5990247847d66eb272e01ea5737180a4b09d365e2945606f7

  • SHA512

    73898d5df764bc3ff448e8bf2721a7c7f3acec959bf2b783e1df446c9bbbd94db73667fbd4fd8f9085737d4c664a1de732a952e32f4a8d20a2b6418e670dd7e4

  • SSDEEP

    3072:MH7e7moy8Sv+qEhMU5SQzcDqfrx+VA11PJfulEDnT:GH8mpEfS4cmfr/dJftj

Score
10/10
strelastealer

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      5bfd80d6a3bcc37ade665e165b3b1940N.exe

    • Size

      125KB

    • MD5

      5bfd80d6a3bcc37ade665e165b3b1940

    • SHA1

      e393b1a2d5e93e504d497a485daa2b9833127052

    • SHA256

      65d7461b6b16d4f5990247847d66eb272e01ea5737180a4b09d365e2945606f7

    • SHA512

      73898d5df764bc3ff448e8bf2721a7c7f3acec959bf2b783e1df446c9bbbd94db73667fbd4fd8f9085737d4c664a1de732a952e32f4a8d20a2b6418e670dd7e4

    • SSDEEP

      3072:MH7e7moy8Sv+qEhMU5SQzcDqfrx+VA11PJfulEDnT:GH8mpEfS4cmfr/dJftj

    Score
    10/10
    strelastealer

    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

      stealerstrela
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks