Overview

overview

10

Static

static

3

c82b45d130...0N.dll

windows7-x64

10

c82b45d130...0N.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c82b45d130c91ae199f8357a6bb668a0N.exe

  • Size

    276KB

  • Sample

    240716-qnxwhavclr

  • MD5

    c82b45d130c91ae199f8357a6bb668a0

  • SHA1

    38d47846202a7bb24b9b2ce34ec6b3360972d1c9

  • SHA256

    34a0eac910a1cc8a41942e3c9052b80e6020f6640736f97f77756d28b97a481f

  • SHA512

    94f378ae4ecd6c77f29f6205a3345833cfde46dc1b98acf88eb3d9c6e3d06abf509b2462083f95770f400cdf99504d3c2903f98a4416c183530f8f646f543b3e

  • SSDEEP

    3072:v7jroPyO+axaywTAKclHx889nTCYVZ4UQVT/q8SyNmKcJwvebh/ooU8GppUB:3BxaxATAKcw89TCTUwHfNrBGl/o6kUB

Score
10/10
strelastealer

Malware Config

Extracted

Family

strela

C2

45.9.74.176

Attributes
  • url_path

    /server.php

  • user_agent

    Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537

Targets

    • Target

      c82b45d130c91ae199f8357a6bb668a0N.exe

    • Size

      276KB

    • MD5

      c82b45d130c91ae199f8357a6bb668a0

    • SHA1

      38d47846202a7bb24b9b2ce34ec6b3360972d1c9

    • SHA256

      34a0eac910a1cc8a41942e3c9052b80e6020f6640736f97f77756d28b97a481f

    • SHA512

      94f378ae4ecd6c77f29f6205a3345833cfde46dc1b98acf88eb3d9c6e3d06abf509b2462083f95770f400cdf99504d3c2903f98a4416c183530f8f646f543b3e

    • SSDEEP

      3072:v7jroPyO+axaywTAKclHx889nTCYVZ4UQVT/q8SyNmKcJwvebh/ooU8GppUB:3BxaxATAKcw89TCTUwHfNrBGl/o6kUB

    Score
    10/10
    strelastealer

    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

      stealerstrela
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks