General

  • Target

    015a650fe9d41267f5238ec399245bd0N.exe

  • Size

    125KB

  • Sample

    240716-yt22ea1apc

  • MD5

    015a650fe9d41267f5238ec399245bd0

  • SHA1

    182f6adad490256c8d56d327e03e349dcaa6668f

  • SHA256

    96d90aaa05e349f2cd4566b8e40f267c0732146958e62840082f02fdfa0f06c6

  • SHA512

    c4cb79966677d20dbb8a23660202d99ad985cd27c294054a69126c4eb01abbdc1bfe5db1632717588b4d2fbc611f4168ed8b2050e7666520b934f5469e20d506

  • SSDEEP

    3072:Y34clrWcsiVQ/LwFWOFztDc39cIbV8XeYcj7yLS83E6a9Sy:Y3bLlVQz/MtDc3GIbV5j72nEfJ

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      015a650fe9d41267f5238ec399245bd0N.exe

    • Size

      125KB

    • MD5

      015a650fe9d41267f5238ec399245bd0

    • SHA1

      182f6adad490256c8d56d327e03e349dcaa6668f

    • SHA256

      96d90aaa05e349f2cd4566b8e40f267c0732146958e62840082f02fdfa0f06c6

    • SHA512

      c4cb79966677d20dbb8a23660202d99ad985cd27c294054a69126c4eb01abbdc1bfe5db1632717588b4d2fbc611f4168ed8b2050e7666520b934f5469e20d506

    • SSDEEP

      3072:Y34clrWcsiVQ/LwFWOFztDc39cIbV8XeYcj7yLS83E6a9Sy:Y3bLlVQz/MtDc3GIbV5j72nEfJ

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks