General

  • Target

    8c5ae2b48f83f491acbbdc493cb1db487fbf433bb3b303604c2e1aef6e1a9c4e

  • Size

    181KB

  • Sample

    240724-adwmpawfkq

  • MD5

    5f2bb4406ecf01f1e938090b2b2a1684

  • SHA1

    328809e6f660adbc11c3c9be00e95b9914c01cbe

  • SHA256

    8c5ae2b48f83f491acbbdc493cb1db487fbf433bb3b303604c2e1aef6e1a9c4e

  • SHA512

    65fe0aa322ed7c0b9775ddf04c30e0f8849207bbb679ae8284e0bae1fbd0da26d65d5bd7e10be28ed6165471ed47bac75af050ff9b816264a366a1ef66ba2435

  • SSDEEP

    3072:wE6I7myrvsZ7maj+CRorrR4DnwKX+klLQUlfWo/bw/CSaE/szYwObSWN0o4Nm0hj:nv2T+C8rKDnwkh5fsCSaJnVm0E

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.36

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      8c5ae2b48f83f491acbbdc493cb1db487fbf433bb3b303604c2e1aef6e1a9c4e

    • Size

      181KB

    • MD5

      5f2bb4406ecf01f1e938090b2b2a1684

    • SHA1

      328809e6f660adbc11c3c9be00e95b9914c01cbe

    • SHA256

      8c5ae2b48f83f491acbbdc493cb1db487fbf433bb3b303604c2e1aef6e1a9c4e

    • SHA512

      65fe0aa322ed7c0b9775ddf04c30e0f8849207bbb679ae8284e0bae1fbd0da26d65d5bd7e10be28ed6165471ed47bac75af050ff9b816264a366a1ef66ba2435

    • SSDEEP

      3072:wE6I7myrvsZ7maj+CRorrR4DnwKX+klLQUlfWo/bw/CSaE/szYwObSWN0o4Nm0hj:nv2T+C8rKDnwkh5fsCSaJnVm0E

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks