General

  • Target

    c744cb410ea0beda1d3b50e5e7539170N.exe

  • Size

    123KB

  • Sample

    240716-qkcq6avaqm

  • MD5

    c744cb410ea0beda1d3b50e5e7539170

  • SHA1

    6252b816ce927a4ce8b2453b92bbfc9e60345b5c

  • SHA256

    70d7584ab7b43c8083d4ed3d1ea90e88b7c48af454c143cfc3bc26541d96617d

  • SHA512

    0eeeaae8b4bc2eced982612e7630b3fcbc559f74e1c21c7267553e6755e86353c7ad600079655ca48efdec03b8257b61c8be126c17f0ebb3335a83da5bd0d8d1

  • SSDEEP

    3072:a+B6xLFqfx1CMS+UJjY4sZQ/FOZ8lFgvWbdzk3vHJNgQ2V7V0hhMj:a+BaxqJ1BS+u8lUEZ87gO1wvH4vlwi

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      c744cb410ea0beda1d3b50e5e7539170N.exe

    • Size

      123KB

    • MD5

      c744cb410ea0beda1d3b50e5e7539170

    • SHA1

      6252b816ce927a4ce8b2453b92bbfc9e60345b5c

    • SHA256

      70d7584ab7b43c8083d4ed3d1ea90e88b7c48af454c143cfc3bc26541d96617d

    • SHA512

      0eeeaae8b4bc2eced982612e7630b3fcbc559f74e1c21c7267553e6755e86353c7ad600079655ca48efdec03b8257b61c8be126c17f0ebb3335a83da5bd0d8d1

    • SSDEEP

      3072:a+B6xLFqfx1CMS+UJjY4sZQ/FOZ8lFgvWbdzk3vHJNgQ2V7V0hhMj:a+BaxqJ1BS+u8lUEZ87gO1wvH4vlwi

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks