Overview

overview

10

Static

static

3

9490ed3673...0N.dll

windows7-x64

10

9490ed3673...0N.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9490ed3673ef571816040d923f51be20N.exe

  • Size

    125KB

  • Sample

    240716-kfp8sswfkh

  • MD5

    9490ed3673ef571816040d923f51be20

  • SHA1

    d79d0a274943d82066ba2c36f3d8f176be89d8da

  • SHA256

    a49c69bb42d3e21102275db54f60e6bdbaf5ecb8bd477e680863c9fb8ba7e435

  • SHA512

    d972a3c4b0ee975fab46944a56215693580b8144d0017d13e89398a832ccedc4ee1c396a7dbcf3a82165ecf9b94ece04a7700b4bff70fb57728ad45e2789edec

  • SSDEEP

    3072:ATS6drATtAtERpku/TAESKN2tX1M0v/jhJsMsdW:AGW6tAtERTHSoK1Zv/jps8

Score
10/10
strelastealer

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      9490ed3673ef571816040d923f51be20N.exe

    • Size

      125KB

    • MD5

      9490ed3673ef571816040d923f51be20

    • SHA1

      d79d0a274943d82066ba2c36f3d8f176be89d8da

    • SHA256

      a49c69bb42d3e21102275db54f60e6bdbaf5ecb8bd477e680863c9fb8ba7e435

    • SHA512

      d972a3c4b0ee975fab46944a56215693580b8144d0017d13e89398a832ccedc4ee1c396a7dbcf3a82165ecf9b94ece04a7700b4bff70fb57728ad45e2789edec

    • SSDEEP

      3072:ATS6drATtAtERpku/TAESKN2tX1M0v/jhJsMsdW:AGW6tAtERTHSoK1Zv/jps8

    Score
    10/10
    strelastealer

    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

      stealerstrela
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks