General

  • Target

    023ca1347c4aa490fc430260506ced90N.exe

  • Size

    162KB

  • Sample

    240725-zfq8estbmn

  • MD5

    023ca1347c4aa490fc430260506ced90

  • SHA1

    3005ee4161ec7d7ac91be1c2382ae51abc636347

  • SHA256

    512698186c8f0005686918fd4fa6a9cdaa00fa2383484e9b45e53098a30e6bb3

  • SHA512

    dd35e27b59f10c54e5788e0d4e3061ca5c409a01945478ef55762bd249fefc47cd357139f8add3e2ec66f0e23e33e24922290cab27bc4362fd47bf97a644f2d7

  • SSDEEP

    3072:7u6bdqnnt4Fyt/L8c3OrN3TtpMKa7Z4U0JGB/RwnNbOTocJ:xbknnt4Itgc3OrRZCnV4boBen5U

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.36

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      023ca1347c4aa490fc430260506ced90N.exe

    • Size

      162KB

    • MD5

      023ca1347c4aa490fc430260506ced90

    • SHA1

      3005ee4161ec7d7ac91be1c2382ae51abc636347

    • SHA256

      512698186c8f0005686918fd4fa6a9cdaa00fa2383484e9b45e53098a30e6bb3

    • SHA512

      dd35e27b59f10c54e5788e0d4e3061ca5c409a01945478ef55762bd249fefc47cd357139f8add3e2ec66f0e23e33e24922290cab27bc4362fd47bf97a644f2d7

    • SSDEEP

      3072:7u6bdqnnt4Fyt/L8c3OrN3TtpMKa7Z4U0JGB/RwnNbOTocJ:xbknnt4Itgc3OrRZCnV4boBen5U

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks