General

  • Target

    8133dd308d7dfd992acd3a5b18029bd0N.exe

  • Size

    124KB

  • Sample

    240716-g8kl8syfkr

  • MD5

    8133dd308d7dfd992acd3a5b18029bd0

  • SHA1

    548251862bed78bb7e0567ec6c27e758ba058959

  • SHA256

    ec7827fa1e5e749c06d754ed4aebaf4b64eea381682079068aa75ee4010b353b

  • SHA512

    edd2e9880292f4d02bdb088d7061e42735f58d00bf45e46ba57bccdb2b81769c0c83aab8a295531d77fb84fb6739d02e30b74d54f30db9afbe2dc925c9a48323

  • SSDEEP

    3072:LdQEkTsSpOl1T0eirh/9gYvtDsNKOYlbK:LdQE2sGODIeWNTOYFK

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      8133dd308d7dfd992acd3a5b18029bd0N.exe

    • Size

      124KB

    • MD5

      8133dd308d7dfd992acd3a5b18029bd0

    • SHA1

      548251862bed78bb7e0567ec6c27e758ba058959

    • SHA256

      ec7827fa1e5e749c06d754ed4aebaf4b64eea381682079068aa75ee4010b353b

    • SHA512

      edd2e9880292f4d02bdb088d7061e42735f58d00bf45e46ba57bccdb2b81769c0c83aab8a295531d77fb84fb6739d02e30b74d54f30db9afbe2dc925c9a48323

    • SSDEEP

      3072:LdQEkTsSpOl1T0eirh/9gYvtDsNKOYlbK:LdQE2sGODIeWNTOYFK

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks