Overview

overview

10

Static

static

3

cd39bec789...83.dll

windows7-x64

10

cd39bec789...83.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cd39bec789b79d9ea6a642ab2ddc93121f5596de21e3b13c335ceaddb83f2083

  • Size

    238KB

  • Sample

    241017-1hsdya1cpk

  • MD5

    1125f2302b70b848aa4fac0f8e78a854

  • SHA1

    a6ae96bd91e2f40409a2fbc44a0f48e3eb53ff33

  • SHA256

    cd39bec789b79d9ea6a642ab2ddc93121f5596de21e3b13c335ceaddb83f2083

  • SHA512

    9dc5f1412ee367097d7770638e69ac6d971720b2dfae292a800615bb803ed7d7babcd5f6210635ecd02b1bdb5886f89a08bfa9e37d1bf15af31138056df037b5

  • SSDEEP

    3072:RwojVWGVHsECD24ohYOgiN5WV3uahEgl2ZCzRP2aurhES6laHQK8NeJyaJDoVVG8:20VWZEljWe2tuvrhEONugXDozR

Score
10/10
strelastealer

Malware Config

Extracted

Family

strela

C2

94.159.113.48

Attributes
  • url_path

    /server.php

Targets

    • Target

      cd39bec789b79d9ea6a642ab2ddc93121f5596de21e3b13c335ceaddb83f2083

    • Size

      238KB

    • MD5

      1125f2302b70b848aa4fac0f8e78a854

    • SHA1

      a6ae96bd91e2f40409a2fbc44a0f48e3eb53ff33

    • SHA256

      cd39bec789b79d9ea6a642ab2ddc93121f5596de21e3b13c335ceaddb83f2083

    • SHA512

      9dc5f1412ee367097d7770638e69ac6d971720b2dfae292a800615bb803ed7d7babcd5f6210635ecd02b1bdb5886f89a08bfa9e37d1bf15af31138056df037b5

    • SSDEEP

      3072:RwojVWGVHsECD24ohYOgiN5WV3uahEgl2ZCzRP2aurhES6laHQK8NeJyaJDoVVG8:20VWZEljWe2tuvrhEONugXDozR

    Score
    10/10
    strelastealer

    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

      stealerstrela
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks