Overview

overview

10

Static

static

3

d4d49d605c...3N.dll

windows7-x64

10

d4d49d605c...3N.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d4d49d605c25ef3f1a41c6fd24a87f22bc74177891c300399b073d5a7d219003N

  • Size

    423KB

  • Sample

    241105-kpfqqaxmez

  • MD5

    640794086caf5d647fa17e0cb1492cd0

  • SHA1

    b166eb89f19778558016262f9348379b40e6b1d2

  • SHA256

    d4d49d605c25ef3f1a41c6fd24a87f22bc74177891c300399b073d5a7d219003

  • SHA512

    6bd070247fbd0f72dd0a45f9191d118f773f244a96c86dd1ee14fe74ee9437ac10c8d6f2a18dc32d3478a596afa3ac1d7706ac3994edea22844fd6333137d215

  • SSDEEP

    6144:dWavrT/CCbmISBh9bFVudzWAcIPiqqrPdpL0TdVq9D1RR/vB6Ch3azhqYDJQChzX:ZTJmf5uxfY2o1RbD5bYDKChzMflU

Score
10/10
strelastealer

Malware Config

Extracted

Family

strela

C2

94.159.113.82

Attributes
  • url_path

    /server.php

Targets

    • Target

      d4d49d605c25ef3f1a41c6fd24a87f22bc74177891c300399b073d5a7d219003N

    • Size

      423KB

    • MD5

      640794086caf5d647fa17e0cb1492cd0

    • SHA1

      b166eb89f19778558016262f9348379b40e6b1d2

    • SHA256

      d4d49d605c25ef3f1a41c6fd24a87f22bc74177891c300399b073d5a7d219003

    • SHA512

      6bd070247fbd0f72dd0a45f9191d118f773f244a96c86dd1ee14fe74ee9437ac10c8d6f2a18dc32d3478a596afa3ac1d7706ac3994edea22844fd6333137d215

    • SSDEEP

      6144:dWavrT/CCbmISBh9bFVudzWAcIPiqqrPdpL0TdVq9D1RR/vB6Ch3azhqYDJQChzX:ZTJmf5uxfY2o1RbD5bYDKChzMflU

    Score
    10/10
    strelastealer

    • Detects Strela Stealer payload

    • Strela family

      strela

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

      stealerstrela
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks