strela | e79263c3a3c852899b75600aa9c4e2743ddaece52f62cf8e2ba1e89fed62f15a

General

Target

e79263c3a3c852899b75600aa9c4e2743ddaece52f62cf8e2ba1e89fed62f15aN
Size

1.7MB
Sample

241021-ycjthascqb
MD5

f2171ee88d057d220847ec05150ff840
SHA1

0a6ed7f46f322015bf44f92bea21c1620198fa24
SHA256

e79263c3a3c852899b75600aa9c4e2743ddaece52f62cf8e2ba1e89fed62f15a
SHA512

089d4b9fbad097cd9880357a91fc229bf73063da34b7743a794d6dac4c0cff6615f958b7024b389d6d0e237752eefd2dd2dd687d12c655a4d6ab3ce9dd6a3da8
SSDEEP

24576:JanwhSe11QSONCpGJCjETPlGC78XCejIODosTigQytWpq0IIWv3yO04a/fn55/kY:knw9oUUEEDlGUrMNcbiwdf594Q

Score

10^/10

Malware Config

Targets

- Target
  
  e79263c3a3c852899b75600aa9c4e2743ddaece52f62cf8e2ba1e89fed62f15aN
- Size
  
  1.7MB
- MD5
  
  f2171ee88d057d220847ec05150ff840
- SHA1
  
  0a6ed7f46f322015bf44f92bea21c1620198fa24
- SHA256
  
  e79263c3a3c852899b75600aa9c4e2743ddaece52f62cf8e2ba1e89fed62f15a
- SHA512
  
  089d4b9fbad097cd9880357a91fc229bf73063da34b7743a794d6dac4c0cff6615f958b7024b389d6d0e237752eefd2dd2dd687d12c655a4d6ab3ce9dd6a3da8
- SSDEEP
  
  24576:JanwhSe11QSONCpGJCjETPlGC78XCejIODosTigQytWpq0IIWv3yO04a/fn55/kY:knw9oUUEEDlGUrMNcbiwdf594Q
Score

10^/10

strela xmrig miner stealer upx
- Detects Strela Stealer payload
- Strela stealer
  An info stealer targeting mail credentials first seen in late 2022.
  stealer strela
- xmrig
  XMRig is a high performance, open source, cross platform CPU/GPU miner.
  miner xmrig
- XMRig Miner payload
  miner
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

2

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Detects Strela Stealer payload

Strela stealer

xmrig

XMRig Miner payload

Executes dropped EXE

Loads dropped DLL

Drops file in System32 directory

UPX packed file

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2