General

  • Target

    78aef6c56f067b2f44f3c793855ea2e0N.exe

  • Size

    179KB

  • Sample

    240721-gvhkqaxcqm

  • MD5

    78aef6c56f067b2f44f3c793855ea2e0

  • SHA1

    4d784f3e694983c22c2154fc272fdac7ba4d037c

  • SHA256

    2e18504bd7af0dfd60abff54d78d4fcde1904ef874a7562959c48e106cb0534c

  • SHA512

    91946869afcb3a4e10b1822c29cc0bed9cecac3ebcf25595d892c1490738dee71de67e7b9491c2956083352772b0910c08ada2d7b032d645ac05f3a96cd849f3

  • SSDEEP

    3072:dvMxUPMO3DLh7FNVTOMhk9KLq8/QRo+ESC2iPLQfWjIg6rqFOSsB:jPMO3nbT/48YCHPLQfWkNrssB

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.36

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      78aef6c56f067b2f44f3c793855ea2e0N.exe

    • Size

      179KB

    • MD5

      78aef6c56f067b2f44f3c793855ea2e0

    • SHA1

      4d784f3e694983c22c2154fc272fdac7ba4d037c

    • SHA256

      2e18504bd7af0dfd60abff54d78d4fcde1904ef874a7562959c48e106cb0534c

    • SHA512

      91946869afcb3a4e10b1822c29cc0bed9cecac3ebcf25595d892c1490738dee71de67e7b9491c2956083352772b0910c08ada2d7b032d645ac05f3a96cd849f3

    • SSDEEP

      3072:dvMxUPMO3DLh7FNVTOMhk9KLq8/QRo+ESC2iPLQfWjIg6rqFOSsB:jPMO3nbT/48YCHPLQfWkNrssB

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks