General

  • Target

    28da761b6252a535484f66bf285e9f30N.exe

  • Size

    184KB

  • Sample

    240720-apehjsxgjj

  • MD5

    28da761b6252a535484f66bf285e9f30

  • SHA1

    6fc3ab8fa781b0195d7f4d864083fc1c6d1bad18

  • SHA256

    d18f85a79f076f11da0bfc78cf8e49f49d8194a649a91e1d659a7009d3c5797f

  • SHA512

    a58dc0588267acfb0c825b28af7de434644fb332c97b2a1128f01ce42145e051ac7854395c43014cfc36c47bd1abf00b9315bf9f31ee23b0aa638559a0ff8fff

  • SSDEEP

    3072:MspP8mvq+aAHgl8KyxLLm3k28SeyE1KaA/yjnG2+HoZMUgiBruI9DLLo8/:MkHaB3ytt28jTP+YTZ9DL

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.36

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      28da761b6252a535484f66bf285e9f30N.exe

    • Size

      184KB

    • MD5

      28da761b6252a535484f66bf285e9f30

    • SHA1

      6fc3ab8fa781b0195d7f4d864083fc1c6d1bad18

    • SHA256

      d18f85a79f076f11da0bfc78cf8e49f49d8194a649a91e1d659a7009d3c5797f

    • SHA512

      a58dc0588267acfb0c825b28af7de434644fb332c97b2a1128f01ce42145e051ac7854395c43014cfc36c47bd1abf00b9315bf9f31ee23b0aa638559a0ff8fff

    • SSDEEP

      3072:MspP8mvq+aAHgl8KyxLLm3k28SeyE1KaA/yjnG2+HoZMUgiBruI9DLLo8/:MkHaB3ytt28jTP+YTZ9DL

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks