Overview

overview

10

Static

static

3

644182a976...0N.dll

windows7-x64

10

644182a976...0N.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    644182a976bae08b631b405c61c14fa0N.exe

  • Size

    123KB

  • Sample

    240716-ekc65sxajb

  • MD5

    644182a976bae08b631b405c61c14fa0

  • SHA1

    4a65166718e13dd3119b78b89148973c16104034

  • SHA256

    0d29855a90fc846ef48e43f6767634131ba3bcaa17589b45cf49099385ce5ad8

  • SHA512

    1b01f67dffea148ae787d77b5519027f3bff82f0c9e1f95c7deedb968c3e31f534d594c0c3508a75aaa88528fc3f35363a8da9b6eb0737c5f5ab23fd4d03eca9

  • SSDEEP

    3072:QRc9I4M5Oe1TYLnrhXfNmxIItRIt+8f1:QRcSjf10nNPNzL+8f

Score
10/10
strelastealer

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      644182a976bae08b631b405c61c14fa0N.exe

    • Size

      123KB

    • MD5

      644182a976bae08b631b405c61c14fa0

    • SHA1

      4a65166718e13dd3119b78b89148973c16104034

    • SHA256

      0d29855a90fc846ef48e43f6767634131ba3bcaa17589b45cf49099385ce5ad8

    • SHA512

      1b01f67dffea148ae787d77b5519027f3bff82f0c9e1f95c7deedb968c3e31f534d594c0c3508a75aaa88528fc3f35363a8da9b6eb0737c5f5ab23fd4d03eca9

    • SSDEEP

      3072:QRc9I4M5Oe1TYLnrhXfNmxIItRIt+8f1:QRcSjf10nNPNzL+8f

    Score
    10/10
    strelastealer

    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

      stealerstrela
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks