General

  • Target

    b8c0501de670387e6686a4ea224ca190N.exe

  • Size

    126KB

  • Sample

    240716-n5zqba1fqm

  • MD5

    b8c0501de670387e6686a4ea224ca190

  • SHA1

    524d5d159182e85afd162fded2d9456fb52d9bdb

  • SHA256

    f48c86a69d3eb92e86b9d6570f119a2cd0c6d10f28fa7973f03fa900d8410421

  • SHA512

    984d7e25fae6996494fbb9586911066d8a1089c42a18ea53c9d75a72a0e29af9061d4572e0c405c1e2c742156a20dd2218dab64db03b215ace6e43d207930da3

  • SSDEEP

    1536:wWxTZ57RaWZ7ffyBq9elhANwLdOMomzDNNQyPSvyjH1ts2Fy5Qxhkvql6/iRIqJV:RfK/lBEMokqyPzAWyO6/iRZRqvw2

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      b8c0501de670387e6686a4ea224ca190N.exe

    • Size

      126KB

    • MD5

      b8c0501de670387e6686a4ea224ca190

    • SHA1

      524d5d159182e85afd162fded2d9456fb52d9bdb

    • SHA256

      f48c86a69d3eb92e86b9d6570f119a2cd0c6d10f28fa7973f03fa900d8410421

    • SHA512

      984d7e25fae6996494fbb9586911066d8a1089c42a18ea53c9d75a72a0e29af9061d4572e0c405c1e2c742156a20dd2218dab64db03b215ace6e43d207930da3

    • SSDEEP

      1536:wWxTZ57RaWZ7ffyBq9elhANwLdOMomzDNNQyPSvyjH1ts2Fy5Qxhkvql6/iRIqJV:RfK/lBEMokqyPzAWyO6/iRZRqvw2

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks