General

  • Target

    1b4cd67c5a1bb9dfe340300810d6d9fa62d98592610feddaae8dfb3246489812N

  • Size

    572KB

  • Sample

    241110-r2m4wssjfk

  • MD5

    462682c35d2db243013be55410077640

  • SHA1

    8079332cd626f3b1c6f2297e20fd9075910ac66f

  • SHA256

    1b4cd67c5a1bb9dfe340300810d6d9fa62d98592610feddaae8dfb3246489812

  • SHA512

    5f000a9157553de8be76bdc6d97954775a96d6849240f7e193015259d146d6e20851bf0a9cceec919b4cc6d4bf87c7dd6eeb4cb1a9082cacaf5cbf0025d22476

  • SSDEEP

    12288:Uho07HGvUFmsJu6fvHmru/AJ0ckXiYagNHV:UpIi+Fqyf

Score
10/10

Malware Config

Extracted

Family

strela

C2

94.159.113.86

Attributes
  • url_path

    /server.php

Targets

    • Target

      1b4cd67c5a1bb9dfe340300810d6d9fa62d98592610feddaae8dfb3246489812N

    • Size

      572KB

    • MD5

      462682c35d2db243013be55410077640

    • SHA1

      8079332cd626f3b1c6f2297e20fd9075910ac66f

    • SHA256

      1b4cd67c5a1bb9dfe340300810d6d9fa62d98592610feddaae8dfb3246489812

    • SHA512

      5f000a9157553de8be76bdc6d97954775a96d6849240f7e193015259d146d6e20851bf0a9cceec919b4cc6d4bf87c7dd6eeb4cb1a9082cacaf5cbf0025d22476

    • SSDEEP

      12288:Uho07HGvUFmsJu6fvHmru/AJ0ckXiYagNHV:UpIi+Fqyf

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela family

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks