General

  • Target

    2d3ef7ff6aa29589b8f9dd0893cddb50N.exe

  • Size

    178KB

  • Sample

    240726-tsy6xaseke

  • MD5

    2d3ef7ff6aa29589b8f9dd0893cddb50

  • SHA1

    659f3936bf800e5ea82638496cae095a3a40d0e2

  • SHA256

    3b157a2bcd337f6b361a60049998c7a145ee9e2e53fbed623c994bef143e47e0

  • SHA512

    987cdb6986bd82257c34a615f6673880a9bb4b3169704376e2352830e56b3fd6b36a08d288e226627b4ebcbd6796955c1212893db1d83c0135ad440c932bb5ec

  • SSDEEP

    3072:v3/Y7TPake4TQ1QKf5h1YsSEeyva9g+I1e+ftV7VUS+Maud1oC7BIcYh8:v3/MTyGMNYYCqe+ftV7VPdf7axh8

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.36

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      2d3ef7ff6aa29589b8f9dd0893cddb50N.exe

    • Size

      178KB

    • MD5

      2d3ef7ff6aa29589b8f9dd0893cddb50

    • SHA1

      659f3936bf800e5ea82638496cae095a3a40d0e2

    • SHA256

      3b157a2bcd337f6b361a60049998c7a145ee9e2e53fbed623c994bef143e47e0

    • SHA512

      987cdb6986bd82257c34a615f6673880a9bb4b3169704376e2352830e56b3fd6b36a08d288e226627b4ebcbd6796955c1212893db1d83c0135ad440c932bb5ec

    • SSDEEP

      3072:v3/Y7TPake4TQ1QKf5h1YsSEeyva9g+I1e+ftV7VUS+Maud1oC7BIcYh8:v3/MTyGMNYYCqe+ftV7VPdf7axh8

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks