General

  • Target

    5bb2d5980bffc65695da12e52ef3c0c0N.exe

  • Size

    124KB

  • Sample

    240717-drnqsawflc

  • MD5

    5bb2d5980bffc65695da12e52ef3c0c0

  • SHA1

    12cb9921eec47a1dd7c6e156a5d7e369f1d71d21

  • SHA256

    226eace3787f4a32654441168be014af077a7cbd7975f64a8c287025e7ff9fcf

  • SHA512

    8a1fc69b9d43032419c7a5586ecd719bce170d0fce4ded22e6d202a34e3996b5ad7b5945a79abfe5fefe27d35aadeff3b8eaea53938c97b6115cea2004e9d514

  • SSDEEP

    3072:mjyc7jcC9RzGKln5bUuxcfw9KzVeyBIwv3:mjHPcURFV5bHcfZ5e3

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      5bb2d5980bffc65695da12e52ef3c0c0N.exe

    • Size

      124KB

    • MD5

      5bb2d5980bffc65695da12e52ef3c0c0

    • SHA1

      12cb9921eec47a1dd7c6e156a5d7e369f1d71d21

    • SHA256

      226eace3787f4a32654441168be014af077a7cbd7975f64a8c287025e7ff9fcf

    • SHA512

      8a1fc69b9d43032419c7a5586ecd719bce170d0fce4ded22e6d202a34e3996b5ad7b5945a79abfe5fefe27d35aadeff3b8eaea53938c97b6115cea2004e9d514

    • SSDEEP

      3072:mjyc7jcC9RzGKln5bUuxcfw9KzVeyBIwv3:mjHPcURFV5bHcfZ5e3

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks