General

  • Target

    d10db5acefa97e1442e93990058748978971f10ee4fca5a630f47ac4c6c2e426

  • Size

    153KB

  • Sample

    240725-dmmb6ayalf

  • MD5

    0857c7f9a1abab26ad1fa8a3627843d3

  • SHA1

    10eddbf5dd0ac37fac52d154f1df4471c2f57f95

  • SHA256

    d10db5acefa97e1442e93990058748978971f10ee4fca5a630f47ac4c6c2e426

  • SHA512

    8adb49dcce500c0cff07d61a5df740dc47d7ab17fad426885d437c87fc1ca37c4da6221551224d069242e30de34aec4bf915df7d0874cf02f0289e6bd21c5c1d

  • SSDEEP

    3072:vp9CXYIYjzVnIRShk9KLq8/QRo+ESC2iPLQfWjIg6rqFOSsB:BMrYfVf48YCHPLQfWkNrssB

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.36

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      d10db5acefa97e1442e93990058748978971f10ee4fca5a630f47ac4c6c2e426

    • Size

      153KB

    • MD5

      0857c7f9a1abab26ad1fa8a3627843d3

    • SHA1

      10eddbf5dd0ac37fac52d154f1df4471c2f57f95

    • SHA256

      d10db5acefa97e1442e93990058748978971f10ee4fca5a630f47ac4c6c2e426

    • SHA512

      8adb49dcce500c0cff07d61a5df740dc47d7ab17fad426885d437c87fc1ca37c4da6221551224d069242e30de34aec4bf915df7d0874cf02f0289e6bd21c5c1d

    • SSDEEP

      3072:vp9CXYIYjzVnIRShk9KLq8/QRo+ESC2iPLQfWjIg6rqFOSsB:BMrYfVf48YCHPLQfWkNrssB

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks