General

  • Target

    956401fc4f0c3aa8c36a4809b541f7c0N.exe

  • Size

    124KB

  • Sample

    240716-kh6nkatdrq

  • MD5

    956401fc4f0c3aa8c36a4809b541f7c0

  • SHA1

    cb039fa4649d423024bf1cef825f0903d1df92e0

  • SHA256

    4a0ad44618990ba7cea7f5b58de9292fc55931de1f613a55a95ed22e018b6e49

  • SHA512

    233da2eb3470fa4b16a2c04627f70ce99ef75506200ddba705e180649fa84358d203298839af6978b09010b389acded33145e360431ca81c4fc77fcb7d244525

  • SSDEEP

    3072:P+/ooawCQEApzlcYMMFiSjst5obp9nJShnUX0Tk7:YahgdlcYM2iMsubJqnUkI

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      956401fc4f0c3aa8c36a4809b541f7c0N.exe

    • Size

      124KB

    • MD5

      956401fc4f0c3aa8c36a4809b541f7c0

    • SHA1

      cb039fa4649d423024bf1cef825f0903d1df92e0

    • SHA256

      4a0ad44618990ba7cea7f5b58de9292fc55931de1f613a55a95ed22e018b6e49

    • SHA512

      233da2eb3470fa4b16a2c04627f70ce99ef75506200ddba705e180649fa84358d203298839af6978b09010b389acded33145e360431ca81c4fc77fcb7d244525

    • SSDEEP

      3072:P+/ooawCQEApzlcYMMFiSjst5obp9nJShnUX0Tk7:YahgdlcYM2iMsubJqnUkI

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks