General

  • Target

    0e1d4e08f5b9c13697b73d129e613e70N.exe

  • Size

    124KB

  • Sample

    240716-zt7gkazdpr

  • MD5

    0e1d4e08f5b9c13697b73d129e613e70

  • SHA1

    6a99829ea50070738f327c553e3cdc582563a64c

  • SHA256

    25b76fa5ce715d9ee59c8fd8ca1b471925b80370aa9997447b7a3aa71066fd27

  • SHA512

    eac479381f8c5d6694cbaa6a4ac1ddee5eac89400be488b32e848f39bdeab1b3cde0d6821fd09a228c26fff9c9d96ccafb63e59f2b1299013284d804507454c2

  • SSDEEP

    3072:VcHVd9qKJdWmqTWg/UeFXi+LGYDBS4t2HLAuXHCf:OHOTW8XiMRlSlrAwH

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      0e1d4e08f5b9c13697b73d129e613e70N.exe

    • Size

      124KB

    • MD5

      0e1d4e08f5b9c13697b73d129e613e70

    • SHA1

      6a99829ea50070738f327c553e3cdc582563a64c

    • SHA256

      25b76fa5ce715d9ee59c8fd8ca1b471925b80370aa9997447b7a3aa71066fd27

    • SHA512

      eac479381f8c5d6694cbaa6a4ac1ddee5eac89400be488b32e848f39bdeab1b3cde0d6821fd09a228c26fff9c9d96ccafb63e59f2b1299013284d804507454c2

    • SSDEEP

      3072:VcHVd9qKJdWmqTWg/UeFXi+LGYDBS4t2HLAuXHCf:OHOTW8XiMRlSlrAwH

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks