General

  • Target

    c3546bcb215825e4e6e49b904e8d5da0N.exe

  • Size

    123KB

  • Sample

    240716-p8gjksteln

  • MD5

    c3546bcb215825e4e6e49b904e8d5da0

  • SHA1

    509c51d1121a8ce5a7f30f753a07044bc2f55b9d

  • SHA256

    d4150f40d9758a24034c0ab23dd16aff63035f744613e617d702d56c58d1a8bd

  • SHA512

    2715073518b437f82157de2544c6558f309f37eb1d49777a6543cf1b72352c998325d551f6444bfd22beed973c36b0c5e35b8a66f2dd9a8aebc46a5cfd2b6312

  • SSDEEP

    3072:FSHviiwHfhojFRDNpZVtyyUTRlbPsVixTz0LHp9z8mTA6s:FSHIpaF5/t49lPsVWTwLHp6mTA6s

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      c3546bcb215825e4e6e49b904e8d5da0N.exe

    • Size

      123KB

    • MD5

      c3546bcb215825e4e6e49b904e8d5da0

    • SHA1

      509c51d1121a8ce5a7f30f753a07044bc2f55b9d

    • SHA256

      d4150f40d9758a24034c0ab23dd16aff63035f744613e617d702d56c58d1a8bd

    • SHA512

      2715073518b437f82157de2544c6558f309f37eb1d49777a6543cf1b72352c998325d551f6444bfd22beed973c36b0c5e35b8a66f2dd9a8aebc46a5cfd2b6312

    • SSDEEP

      3072:FSHviiwHfhojFRDNpZVtyyUTRlbPsVixTz0LHp9z8mTA6s:FSHIpaF5/t49lPsVWTwLHp6mTA6s

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks