General

  • Target

    8ea46afb7b06483603bafec6242cb830N.exe

  • Size

    124KB

  • Sample

    240716-jsm4javelg

  • MD5

    8ea46afb7b06483603bafec6242cb830

  • SHA1

    8b81384ca56fbd8aee36f3887b4f3480a38c3cb9

  • SHA256

    c31429688cf576a39481915c233098d23733fd448ce2da7d3b7822e3f3886011

  • SHA512

    4390eaf501f0a3822a7aceb9899228d172a74c737eaec3d9a582ce0dc6ae94b471eda65c7b3ef94b199d026bd5397414b4fe0dde0831cdc190bcb8901b3c91f2

  • SSDEEP

    3072:aFTxU/hpTPVg3GFbc9RYmci6OxinC8JS:MWPh4fYmccew

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      8ea46afb7b06483603bafec6242cb830N.exe

    • Size

      124KB

    • MD5

      8ea46afb7b06483603bafec6242cb830

    • SHA1

      8b81384ca56fbd8aee36f3887b4f3480a38c3cb9

    • SHA256

      c31429688cf576a39481915c233098d23733fd448ce2da7d3b7822e3f3886011

    • SHA512

      4390eaf501f0a3822a7aceb9899228d172a74c737eaec3d9a582ce0dc6ae94b471eda65c7b3ef94b199d026bd5397414b4fe0dde0831cdc190bcb8901b3c91f2

    • SSDEEP

      3072:aFTxU/hpTPVg3GFbc9RYmci6OxinC8JS:MWPh4fYmccew

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks