General

  • Target

    a3edbfb8296a07f09f53f2a03ac7ba83e8264a84.dll.exe

  • Size

    140KB

  • Sample

    241119-p5sgns1lfq

  • MD5

    483d93af4dd6712b6ab5d16e8fe2b149

  • SHA1

    a3edbfb8296a07f09f53f2a03ac7ba83e8264a84

  • SHA256

    514d30cba60d72ef670ccf39abe6d0de739cf2742f86a8cdf2f57002dc2234f7

  • SHA512

    862ad1db47b2eb2aad6c4dbcb6c4db61c844c4914d5329664755e5255c2e0bfbf6b67025223ec771cf7f10949adbce566bcab029206b850766f6385b5d105426

  • SSDEEP

    3072:CfBnsXdSnxrZQndN2trmgAboSVT8w9ub+c3YeiUnPdlV:inuSnxFHPMVTo3Y8lV

Score
10/10

Malware Config

Extracted

Family

strela

C2

94.159.113.79

Attributes
  • url_path

    /up.php

Targets

    • Target

      a3edbfb8296a07f09f53f2a03ac7ba83e8264a84.dll.exe

    • Size

      140KB

    • MD5

      483d93af4dd6712b6ab5d16e8fe2b149

    • SHA1

      a3edbfb8296a07f09f53f2a03ac7ba83e8264a84

    • SHA256

      514d30cba60d72ef670ccf39abe6d0de739cf2742f86a8cdf2f57002dc2234f7

    • SHA512

      862ad1db47b2eb2aad6c4dbcb6c4db61c844c4914d5329664755e5255c2e0bfbf6b67025223ec771cf7f10949adbce566bcab029206b850766f6385b5d105426

    • SSDEEP

      3072:CfBnsXdSnxrZQndN2trmgAboSVT8w9ub+c3YeiUnPdlV:inuSnxFHPMVTo3Y8lV

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela family

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks