General

  • Target

    b058a1f18e0365b2fd5193042e778e10N.exe

  • Size

    124KB

  • Sample

    240716-nb82wssejh

  • MD5

    b058a1f18e0365b2fd5193042e778e10

  • SHA1

    8f1f4d401982bff64edaa79c7c9261a0025f388e

  • SHA256

    876a2d9d1b6595a317154cdf16fd80838131d071b9837a21ed8e982092484504

  • SHA512

    28d184a01b75f35360f7107042c34b5af95e2c4bb378ce32604c87f3da072814b5e01a4e1794ddd75d1cd339faecbf3bba163a114baa8794c4a29628b11b19e7

  • SSDEEP

    3072:1X0YNyGkHnt7IKsMc8wCOIceENZSbRKaG:1EIyGLNf8wCOIc/M

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      b058a1f18e0365b2fd5193042e778e10N.exe

    • Size

      124KB

    • MD5

      b058a1f18e0365b2fd5193042e778e10

    • SHA1

      8f1f4d401982bff64edaa79c7c9261a0025f388e

    • SHA256

      876a2d9d1b6595a317154cdf16fd80838131d071b9837a21ed8e982092484504

    • SHA512

      28d184a01b75f35360f7107042c34b5af95e2c4bb378ce32604c87f3da072814b5e01a4e1794ddd75d1cd339faecbf3bba163a114baa8794c4a29628b11b19e7

    • SSDEEP

      3072:1X0YNyGkHnt7IKsMc8wCOIceENZSbRKaG:1EIyGLNf8wCOIc/M

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks