strela | 271665f192c4ea996cba44fef20806accb4fb02954c85128e362a5ab39f512af

General

Target

fe1f9ce6c70a5970969b6a3874d7ff70N.exe
Size

1.4MB
Sample

240820-rpks1awgme
MD5

fe1f9ce6c70a5970969b6a3874d7ff70
SHA1

d41dd46e43d6094bcf91ab117b2e75dbc3af538e
SHA256

271665f192c4ea996cba44fef20806accb4fb02954c85128e362a5ab39f512af
SHA512

f1d7f53d9b879d29d873bd122cace16ddc7e01ed6ee9d1c95c12e1933435d0a45d2a4686489858bb86ac2b09727f6742ac4d915ac9169060b9f47879dc05d79f
SSDEEP

24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcmC3f/8lkKJhlsr3Pznq82FD/v8F6V:knw9oUUEEDl37jcmWH8SKJhSnq8u3TV

Score

10^/10

Malware Config

Targets

- Target
  
  fe1f9ce6c70a5970969b6a3874d7ff70N.exe
- Size
  
  1.4MB
- MD5
  
  fe1f9ce6c70a5970969b6a3874d7ff70
- SHA1
  
  d41dd46e43d6094bcf91ab117b2e75dbc3af538e
- SHA256
  
  271665f192c4ea996cba44fef20806accb4fb02954c85128e362a5ab39f512af
- SHA512
  
  f1d7f53d9b879d29d873bd122cace16ddc7e01ed6ee9d1c95c12e1933435d0a45d2a4686489858bb86ac2b09727f6742ac4d915ac9169060b9f47879dc05d79f
- SSDEEP
  
  24576:JanwhSe11QSONCpGJCjETPlWXWZ5PbcmC3f/8lkKJhlsr3Pznq82FD/v8F6V:knw9oUUEEDl37jcmWH8SKJhSnq8u3TV
Score

10^/10

strela xmrig miner stealer upx
- Detects Strela Stealer payload
- Strela stealer
  An info stealer targeting mail credentials first seen in late 2022.
  stealer strela
- xmrig
  XMRig is a high performance, open source, cross platform CPU/GPU miner.
  miner xmrig
- XMRig Miner payload
  miner
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

2

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Detects Strela Stealer payload

Strela stealer

xmrig

XMRig Miner payload

Executes dropped EXE

Loads dropped DLL

UPX packed file

Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2