General

  • Target

    687b0c259975b8d480314cf6aafcb6b0N.exe

  • Size

    165KB

  • Sample

    240720-jl1faawfrh

  • MD5

    687b0c259975b8d480314cf6aafcb6b0

  • SHA1

    de54bccedc9617f2ea23f727c021fccd0a571014

  • SHA256

    c5d0a066fd3e863cca80e9aadd3571830cd0951230fd1c6c29856b14ff9d1051

  • SHA512

    51a46b529143f377904116a8f3f2f5d17c7d1adc2b9c294f8d311530e77700c8c98a1b3e3ff12f50f9c809c2dd4feb31edf1c12413a808f7343c276a3d9cc9f7

  • SSDEEP

    3072:dZPek8zjatRCLOkbK0Ja7THfjLF3vCmheQa:dZzcaRCLOgK0wP/PFfW

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.36

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      687b0c259975b8d480314cf6aafcb6b0N.exe

    • Size

      165KB

    • MD5

      687b0c259975b8d480314cf6aafcb6b0

    • SHA1

      de54bccedc9617f2ea23f727c021fccd0a571014

    • SHA256

      c5d0a066fd3e863cca80e9aadd3571830cd0951230fd1c6c29856b14ff9d1051

    • SHA512

      51a46b529143f377904116a8f3f2f5d17c7d1adc2b9c294f8d311530e77700c8c98a1b3e3ff12f50f9c809c2dd4feb31edf1c12413a808f7343c276a3d9cc9f7

    • SSDEEP

      3072:dZPek8zjatRCLOkbK0Ja7THfjLF3vCmheQa:dZzcaRCLOgK0wP/PFfW

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks