General

  • Target

    3d3c95d760042532f1fcc0d493c34b90N.exe

  • Size

    164KB

  • Sample

    240725-ar928swfrp

  • MD5

    3d3c95d760042532f1fcc0d493c34b90

  • SHA1

    18333976d8c1bc0f3e5031711adf497a3a6cabbc

  • SHA256

    eadb78ab32a4e6808a32bd9c59fda915f03eb3217e29f847bdce6af1113fd8b4

  • SHA512

    0cd8f2f99335f3a9e654ad4d7b3d3ba6d852f00e12f742b97ebdcfbc379fc46f34744d5a3606f5fbc9dcc66e4a277db9aab50a46a5570ed4e0fab3efcd9326e4

  • SSDEEP

    3072:j05+bp6TuEXly4l6SUiB3OkYsoJxKmck5/2ZtNVGDG98pRb:j5p6DXr6Sn+lRxK5Frm

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.36

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      3d3c95d760042532f1fcc0d493c34b90N.exe

    • Size

      164KB

    • MD5

      3d3c95d760042532f1fcc0d493c34b90

    • SHA1

      18333976d8c1bc0f3e5031711adf497a3a6cabbc

    • SHA256

      eadb78ab32a4e6808a32bd9c59fda915f03eb3217e29f847bdce6af1113fd8b4

    • SHA512

      0cd8f2f99335f3a9e654ad4d7b3d3ba6d852f00e12f742b97ebdcfbc379fc46f34744d5a3606f5fbc9dcc66e4a277db9aab50a46a5570ed4e0fab3efcd9326e4

    • SSDEEP

      3072:j05+bp6TuEXly4l6SUiB3OkYsoJxKmck5/2ZtNVGDG98pRb:j5p6DXr6Sn+lRxK5Frm

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks