General

  • Target

    61837490031d47bbac205e6c0a51eb70e29f93f3b2b5ccd72ce4ac8ed5e31d73.exe

  • Size

    158KB

  • Sample

    240724-vw6ktsybkr

  • MD5

    688436bf0e7c8a3a30a09be37466e2e4

  • SHA1

    5aee4eae3d4b8fbdcd33cda019df846863452bd1

  • SHA256

    61837490031d47bbac205e6c0a51eb70e29f93f3b2b5ccd72ce4ac8ed5e31d73

  • SHA512

    17bd280aa5333b5f6b9d3ed97ef66ffc33a068cd2f2e87372b516245ece09e3edf2b4b7ee7ce3c2617298bc4c3e45e65816cb75c58a5fd8fbafe7d1f9e978786

  • SSDEEP

    3072:nRklnJo8EW38WmJj6jw9x5vrnW1nviRx5gdDM50:RGne8p5mJvx5jW1n2cE

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.36

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      61837490031d47bbac205e6c0a51eb70e29f93f3b2b5ccd72ce4ac8ed5e31d73.exe

    • Size

      158KB

    • MD5

      688436bf0e7c8a3a30a09be37466e2e4

    • SHA1

      5aee4eae3d4b8fbdcd33cda019df846863452bd1

    • SHA256

      61837490031d47bbac205e6c0a51eb70e29f93f3b2b5ccd72ce4ac8ed5e31d73

    • SHA512

      17bd280aa5333b5f6b9d3ed97ef66ffc33a068cd2f2e87372b516245ece09e3edf2b4b7ee7ce3c2617298bc4c3e45e65816cb75c58a5fd8fbafe7d1f9e978786

    • SSDEEP

      3072:nRklnJo8EW38WmJj6jw9x5vrnW1nviRx5gdDM50:RGne8p5mJvx5jW1n2cE

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks