General

  • Target

    cecce140b4865eab10e9293bda959460N.exe

  • Size

    123KB

  • Sample

    240716-rcxa9sygja

  • MD5

    cecce140b4865eab10e9293bda959460

  • SHA1

    20bdda4978961b30e9c26b38c648d8c3d23aa541

  • SHA256

    3550aa4cd2488a2c24824e4f23d9f19c769493b91ad91ad34fc4b8c4566577c1

  • SHA512

    ad4e548ca381c350dcaab09f1eb1fa6aa4292de7d500b663489b86a428076f6351c4737f31b40e2ee9e16bc945b51ca9007f1c86624aa22eaf88986d84f82ed9

  • SSDEEP

    3072:BwQSRcs5LUUYiIO4XHpT95OifbSc741p+Iip/:eQScs5LjYiIOIJOcc3

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      cecce140b4865eab10e9293bda959460N.exe

    • Size

      123KB

    • MD5

      cecce140b4865eab10e9293bda959460

    • SHA1

      20bdda4978961b30e9c26b38c648d8c3d23aa541

    • SHA256

      3550aa4cd2488a2c24824e4f23d9f19c769493b91ad91ad34fc4b8c4566577c1

    • SHA512

      ad4e548ca381c350dcaab09f1eb1fa6aa4292de7d500b663489b86a428076f6351c4737f31b40e2ee9e16bc945b51ca9007f1c86624aa22eaf88986d84f82ed9

    • SSDEEP

      3072:BwQSRcs5LUUYiIO4XHpT95OifbSc741p+Iip/:eQScs5LjYiIOIJOcc3

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks