Overview

overview

10

Static

static

3

196371523423251.dll

windows7-x64

10

196371523423251.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    196371523423251.dll.exe

  • Size

    174KB

  • Sample

    240717-q6ywhswhne

  • MD5

    73ad760956e51366417c49b885021740

  • SHA1

    dcd7bd1f7bc877ea73692da46c7e6fe688d10ca0

  • SHA256

    3a948982d87b89fe3c05f1b6265d6435e19d51fd970bd773ab0b01e013e1a171

  • SHA512

    f78e47d2be989c1bc5492615220bb0370bc2933b2393abf7891ce8b0d0a77b6bd23e494f0769f74eda0fcbf5a155d8cf893a1086457cb3b42c1a449db079d979

  • SSDEEP

    3072:tssmifopOonT54MHC3ppr8Mx3jsG+hXJBQLrm05:9KQy5NsJF1gB3uLrmc

Score
10/10
strelastealer

Malware Config

Extracted

Family

strela

C2

45.9.74.36

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      196371523423251.dll.exe

    • Size

      174KB

    • MD5

      73ad760956e51366417c49b885021740

    • SHA1

      dcd7bd1f7bc877ea73692da46c7e6fe688d10ca0

    • SHA256

      3a948982d87b89fe3c05f1b6265d6435e19d51fd970bd773ab0b01e013e1a171

    • SHA512

      f78e47d2be989c1bc5492615220bb0370bc2933b2393abf7891ce8b0d0a77b6bd23e494f0769f74eda0fcbf5a155d8cf893a1086457cb3b42c1a449db079d979

    • SSDEEP

      3072:tssmifopOonT54MHC3ppr8Mx3jsG+hXJBQLrm05:9KQy5NsJF1gB3uLrmc

    Score
    10/10
    strelastealer

    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

      stealerstrela
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks