General

  • Target

    a5488b427fd51b6455feab4fa32c75ac76e1d9d33036f871d6384f038a9eef37N

  • Size

    247KB

  • Sample

    241022-15hg9axajh

  • MD5

    9fa3a85a0da418dd2b408f46c0eefc50

  • SHA1

    a0cf93345a3ac8613f6bd83241d03dbea2e03ae5

  • SHA256

    a5488b427fd51b6455feab4fa32c75ac76e1d9d33036f871d6384f038a9eef37

  • SHA512

    52486db77e8b44608f0ea44016c5852d45d6984b40645798f6e09be469ed93b6b6933137ea77bd9822252713848452bf684182e9a33c8372f89f55e501645a0c

  • SSDEEP

    6144:KuZLbK3Y3LDeKM2t87ZT/OxaA0Cdj22yCzSVL5L:zK3YMzOoA0qj22yCzU

Score
10/10

Malware Config

Extracted

Family

strela

C2

94.159.113.48

Attributes
  • url_path

    /server.php

Targets

    • Target

      a5488b427fd51b6455feab4fa32c75ac76e1d9d33036f871d6384f038a9eef37N

    • Size

      247KB

    • MD5

      9fa3a85a0da418dd2b408f46c0eefc50

    • SHA1

      a0cf93345a3ac8613f6bd83241d03dbea2e03ae5

    • SHA256

      a5488b427fd51b6455feab4fa32c75ac76e1d9d33036f871d6384f038a9eef37

    • SHA512

      52486db77e8b44608f0ea44016c5852d45d6984b40645798f6e09be469ed93b6b6933137ea77bd9822252713848452bf684182e9a33c8372f89f55e501645a0c

    • SSDEEP

      6144:KuZLbK3Y3LDeKM2t87ZT/OxaA0Cdj22yCzSVL5L:zK3YMzOoA0qj22yCzU

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks