General

  • Target

    c416011f5d516140c948bbd83b12e440N.exe

  • Size

    123KB

  • Sample

    240716-qanqnswgng

  • MD5

    c416011f5d516140c948bbd83b12e440

  • SHA1

    f831d54959f01f193cb0785a1f6d4a11465ca3ea

  • SHA256

    3ed9e3eed6ec0bc61a05fc4c9763878b55a0b6cdeb661ab1588772bf9658409c

  • SHA512

    bcc68c92a7ceb6ccff96dcf0c32f933253d87f4555e07ee3caa2362896fe29d053682b0c18083a1314671eafa7c9bab8531a4709c9bb0223b79903e579e6139e

  • SSDEEP

    3072:pBw4mlftchL4h8wKjF+BTMVxbDk8F5i1EY:7w9zch0+Bbv5Xi1E

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      c416011f5d516140c948bbd83b12e440N.exe

    • Size

      123KB

    • MD5

      c416011f5d516140c948bbd83b12e440

    • SHA1

      f831d54959f01f193cb0785a1f6d4a11465ca3ea

    • SHA256

      3ed9e3eed6ec0bc61a05fc4c9763878b55a0b6cdeb661ab1588772bf9658409c

    • SHA512

      bcc68c92a7ceb6ccff96dcf0c32f933253d87f4555e07ee3caa2362896fe29d053682b0c18083a1314671eafa7c9bab8531a4709c9bb0223b79903e579e6139e

    • SSDEEP

      3072:pBw4mlftchL4h8wKjF+BTMVxbDk8F5i1EY:7w9zch0+Bbv5Xi1E

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks