General

  • Target

    ad5668c42d8818849c5a8eaade631d60N.exe

  • Size

    124KB

  • Sample

    240716-m3kmyaygkp

  • MD5

    ad5668c42d8818849c5a8eaade631d60

  • SHA1

    874a9741aac3aacf31ec93c1410aba956bb78a5c

  • SHA256

    7c7c7e85033b7a97a62338624cdf7af12f1fe993397a6a5f1a4ddc71ec1b57e0

  • SHA512

    05eccd2818c75761343d8e6349e944f28334699936cd2a6fb338e0d143073460c1e85dfaa92d585cdb3c29938e5489cdf834665a09e3a0ed0b485cef29bf2bd2

  • SSDEEP

    3072:Vfu5lxVXMX2akUmaBZfYClIk9Kq4C/3DY08jaId5:cXxVcmalfFV3Dwa0

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      ad5668c42d8818849c5a8eaade631d60N.exe

    • Size

      124KB

    • MD5

      ad5668c42d8818849c5a8eaade631d60

    • SHA1

      874a9741aac3aacf31ec93c1410aba956bb78a5c

    • SHA256

      7c7c7e85033b7a97a62338624cdf7af12f1fe993397a6a5f1a4ddc71ec1b57e0

    • SHA512

      05eccd2818c75761343d8e6349e944f28334699936cd2a6fb338e0d143073460c1e85dfaa92d585cdb3c29938e5489cdf834665a09e3a0ed0b485cef29bf2bd2

    • SSDEEP

      3072:Vfu5lxVXMX2akUmaBZfYClIk9Kq4C/3DY08jaId5:cXxVcmalfFV3Dwa0

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks