Overview

overview

10

Static

static

3

be41de6f5f...fe.dll

windows7-x64

10

be41de6f5f...fe.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    be41de6f5fd775b52dc3cea545cd79fe.dll.exe

  • Size

    137KB

  • Sample

    241114-hpsn6syqdp

  • MD5

    be41de6f5fd775b52dc3cea545cd79fe

  • SHA1

    9730a761e9f8fcb96c0f17ce155096d52b7ab57b

  • SHA256

    10eca3e3c748a5f090f8c4d339e9ad2afd079ddfc91770b0a541ac08af8d424f

  • SHA512

    bf0dda95118af87d612466234f89cec6ff72df5365b8b3de9f571971938d0d6bb9025399a322488ab1dcdb49443362554317d90bb5b26415c67048f340895d84

  • SSDEEP

    3072:WMo+GzxyvWkaKAl0xez7l5CHHleM607B76GA8AvrnE:Wf1zxyNaK40495CnC5GNerE

Score
10/10
strelastealer

Malware Config

Extracted

Family

strela

C2

94.159.113.79

Attributes
  • url_path

    /up.php

Targets

    • Target

      be41de6f5fd775b52dc3cea545cd79fe.dll.exe

    • Size

      137KB

    • MD5

      be41de6f5fd775b52dc3cea545cd79fe

    • SHA1

      9730a761e9f8fcb96c0f17ce155096d52b7ab57b

    • SHA256

      10eca3e3c748a5f090f8c4d339e9ad2afd079ddfc91770b0a541ac08af8d424f

    • SHA512

      bf0dda95118af87d612466234f89cec6ff72df5365b8b3de9f571971938d0d6bb9025399a322488ab1dcdb49443362554317d90bb5b26415c67048f340895d84

    • SSDEEP

      3072:WMo+GzxyvWkaKAl0xez7l5CHHleM607B76GA8AvrnE:Wf1zxyNaK40495CnC5GNerE

    Score
    10/10
    strelastealer

    • Detects Strela Stealer payload

    • Strela family

      strela

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

      stealerstrela
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks