General

  • Target

    9557298f6877e7db648b53d65f49a730N.exe

  • Size

    124KB

  • Sample

    240716-khtc8stdqn

  • MD5

    9557298f6877e7db648b53d65f49a730

  • SHA1

    0b60b6e74a7be3d2ecb43194f44f4bba958e0651

  • SHA256

    08e37d2bc203ff3669688b0198fb494565ad75b79a324757ae551ef311203bea

  • SHA512

    fc42b3dfbecc19c9beb0714c316f18bfe6f8f4e24d1f1c465657538d3a399d6ec418bdaf98939aedaaa32e9cffc77845aa3dfb9bc332b57b3ae752bb64eb1f9b

  • SSDEEP

    3072:zTde7GNi/RlFXanbgKTNGiT+4sYf0eoySUpj+/TUlRFWviPPkncj:z5e7oiZlFXDaN3T+4sre3SmqsTWaPMnk

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      9557298f6877e7db648b53d65f49a730N.exe

    • Size

      124KB

    • MD5

      9557298f6877e7db648b53d65f49a730

    • SHA1

      0b60b6e74a7be3d2ecb43194f44f4bba958e0651

    • SHA256

      08e37d2bc203ff3669688b0198fb494565ad75b79a324757ae551ef311203bea

    • SHA512

      fc42b3dfbecc19c9beb0714c316f18bfe6f8f4e24d1f1c465657538d3a399d6ec418bdaf98939aedaaa32e9cffc77845aa3dfb9bc332b57b3ae752bb64eb1f9b

    • SSDEEP

      3072:zTde7GNi/RlFXanbgKTNGiT+4sYf0eoySUpj+/TUlRFWviPPkncj:z5e7oiZlFXDaN3T+4sre3SmqsTWaPMnk

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks