General

  • Target

    56f17f09d879dd892e5154e61524ae40N.exe

  • Size

    159KB

  • Sample

    240728-f1fgwazeln

  • MD5

    56f17f09d879dd892e5154e61524ae40

  • SHA1

    48195cd4a7f3feb62482204805a584251ae857a5

  • SHA256

    c9e5968dd9b69c86a1ab69e4f76630959fe48bd308a7778d30b6f7f3da2e8f44

  • SHA512

    379c60bb30b8227d4ebaf9b76ec74626df6553fe2c13c1dc05e02ac16a3a70b48e75833510c727c04e815f2184aa621be1958cf0be10d47fde74506b8134a1a7

  • SSDEEP

    3072:xterlK17V5yZ2EznnN7o3/jWIOHJbAXCMuAbms6dd+6H5shQYe6:upe7V5u20nnBo3rhCWRX6s6m6H5QRt

Score
10/10

Malware Config

Extracted

Family

strela

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      56f17f09d879dd892e5154e61524ae40N.exe

    • Size

      159KB

    • MD5

      56f17f09d879dd892e5154e61524ae40

    • SHA1

      48195cd4a7f3feb62482204805a584251ae857a5

    • SHA256

      c9e5968dd9b69c86a1ab69e4f76630959fe48bd308a7778d30b6f7f3da2e8f44

    • SHA512

      379c60bb30b8227d4ebaf9b76ec74626df6553fe2c13c1dc05e02ac16a3a70b48e75833510c727c04e815f2184aa621be1958cf0be10d47fde74506b8134a1a7

    • SSDEEP

      3072:xterlK17V5yZ2EznnN7o3/jWIOHJbAXCMuAbms6dd+6H5shQYe6:upe7V5u20nnBo3rhCWRX6s6m6H5QRt

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks