General

  • Target

    803b842aea3bdf3017c4293976d98db0N.exe

  • Size

    125KB

  • Sample

    240716-g4rjzsydrq

  • MD5

    803b842aea3bdf3017c4293976d98db0

  • SHA1

    5d32d1a281d51d6983939fb7cabe7525b2074db2

  • SHA256

    5550e7816d28f055f61de06a25542785a862437404d9e4747773a9132c2504d1

  • SHA512

    f449ba91c63591c385793504aa493a73971a144b5974210b5837e5505de173bf56e2594ef534ec7d0210292b195ff602f1ae385213a96740fa1409e8914fb0a6

  • SSDEEP

    3072:uF5f6zvn2+VgRchFWzWz6Q96XB508Nxpd+UDKVz:uF5yvbSc6Y4tDM

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      803b842aea3bdf3017c4293976d98db0N.exe

    • Size

      125KB

    • MD5

      803b842aea3bdf3017c4293976d98db0

    • SHA1

      5d32d1a281d51d6983939fb7cabe7525b2074db2

    • SHA256

      5550e7816d28f055f61de06a25542785a862437404d9e4747773a9132c2504d1

    • SHA512

      f449ba91c63591c385793504aa493a73971a144b5974210b5837e5505de173bf56e2594ef534ec7d0210292b195ff602f1ae385213a96740fa1409e8914fb0a6

    • SSDEEP

      3072:uF5f6zvn2+VgRchFWzWz6Q96XB508Nxpd+UDKVz:uF5yvbSc6Y4tDM

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks