General

  • Target

    3cb381aebb25bd138a7a052e13c6efd0N.exe

  • Size

    190KB

  • Sample

    240720-c3lj5awdmh

  • MD5

    3cb381aebb25bd138a7a052e13c6efd0

  • SHA1

    c09dd8164863d92a7e5619f10c1f16851b797f98

  • SHA256

    83571aecdd1b7e5550d71f8c0ba520073f28013191714ee793bf2735cf9b66c8

  • SHA512

    48ce048491b16437d79382a506cee9ee02f02f43c9416acb96b6c485996a1f1c4dc4017e232d032f5b18f46611da0396654bf564a87b6dbdefd62011ab2ff399

  • SSDEEP

    3072:BU9cVhm8fPwaMcGNofAvYj6rHURv8SeyE1KaA/yjnG2+HoZMUgiBruI9DLLo8/:K6VrMcnAvYrv8jTP+YTZ9DL

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.36

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      3cb381aebb25bd138a7a052e13c6efd0N.exe

    • Size

      190KB

    • MD5

      3cb381aebb25bd138a7a052e13c6efd0

    • SHA1

      c09dd8164863d92a7e5619f10c1f16851b797f98

    • SHA256

      83571aecdd1b7e5550d71f8c0ba520073f28013191714ee793bf2735cf9b66c8

    • SHA512

      48ce048491b16437d79382a506cee9ee02f02f43c9416acb96b6c485996a1f1c4dc4017e232d032f5b18f46611da0396654bf564a87b6dbdefd62011ab2ff399

    • SSDEEP

      3072:BU9cVhm8fPwaMcGNofAvYj6rHURv8SeyE1KaA/yjnG2+HoZMUgiBruI9DLLo8/:K6VrMcnAvYrv8jTP+YTZ9DL

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks