General

  • Target

    ca5f43a8e01be36b4b62b88194e87410N.exe

  • Size

    124KB

  • Sample

    240716-qv874sxhje

  • MD5

    ca5f43a8e01be36b4b62b88194e87410

  • SHA1

    756e00f7778c6971eebd421b90474277ef5228a2

  • SHA256

    1175f04b54d8ae7d65c0dc5e82552f4b94b86f708416908122329597209b80c4

  • SHA512

    53206e091c158747a23a6d3b3c13d8c27f04b2bf09059dfee1ffd5aba054c955be60cdfaa4e4c14fdead6c8a7878b743bf93b532b6befbf551cb4ff7b183e420

  • SSDEEP

    3072:jfz4KC5NB442z/nQxVWoi0eTXdz/Ac3CNIfjLiRlS6jnLm:fLC5b4lzIaoihLAcSNILLimp

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      ca5f43a8e01be36b4b62b88194e87410N.exe

    • Size

      124KB

    • MD5

      ca5f43a8e01be36b4b62b88194e87410

    • SHA1

      756e00f7778c6971eebd421b90474277ef5228a2

    • SHA256

      1175f04b54d8ae7d65c0dc5e82552f4b94b86f708416908122329597209b80c4

    • SHA512

      53206e091c158747a23a6d3b3c13d8c27f04b2bf09059dfee1ffd5aba054c955be60cdfaa4e4c14fdead6c8a7878b743bf93b532b6befbf551cb4ff7b183e420

    • SSDEEP

      3072:jfz4KC5NB442z/nQxVWoi0eTXdz/Ac3CNIfjLiRlS6jnLm:fLC5b4lzIaoihLAcSNILLimp

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks