General

  • Target

    04d1c299a92e1e12c8d6f030b17f5e60N.exe

  • Size

    166KB

  • Sample

    240726-n2dcxazbre

  • MD5

    04d1c299a92e1e12c8d6f030b17f5e60

  • SHA1

    28d7bf5791297c311ed9d002196f62ce8abcdc86

  • SHA256

    e101e47f14478aff99a244a8176a6f61fccb42394fe0f19e17cbbbef5fb1b086

  • SHA512

    c86343c1dfeeef15d282fc7f71c11d8239b2be532d3d286401a115f55e576cb498053f21bcd184e14cda3be8eb4fe31739c8c7ba4433c0c4f4dc05120cfe43ba

  • SSDEEP

    3072:Ms/yGXaR2TVn1jZwkwjh41wTmunmbMK3Ip5QiNhMDE2k:MKpamn96ISTmunMMKYDlNhMg

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.36

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      04d1c299a92e1e12c8d6f030b17f5e60N.exe

    • Size

      166KB

    • MD5

      04d1c299a92e1e12c8d6f030b17f5e60

    • SHA1

      28d7bf5791297c311ed9d002196f62ce8abcdc86

    • SHA256

      e101e47f14478aff99a244a8176a6f61fccb42394fe0f19e17cbbbef5fb1b086

    • SHA512

      c86343c1dfeeef15d282fc7f71c11d8239b2be532d3d286401a115f55e576cb498053f21bcd184e14cda3be8eb4fe31739c8c7ba4433c0c4f4dc05120cfe43ba

    • SSDEEP

      3072:Ms/yGXaR2TVn1jZwkwjh41wTmunmbMK3Ip5QiNhMDE2k:MKpamn96ISTmunMMKYDlNhMg

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks