General

  • Target

    __8E3C3DD5-336E-4B8E-BBA3-A798F1154CE6_.dll.bin

  • Size

    140KB

  • Sample

    241119-s9l28sydpm

  • MD5

    654117d70d1dfbfa4c4cb322ffcd0da1

  • SHA1

    f6a14cd76cf15d3c0713532d291799a420d14208

  • SHA256

    7942f25cfd89477e50bd5ee39706bae8473e3c5d63642f5c58a80c361742edd1

  • SHA512

    85df87d6948661d4be7a49d94be18237d2cb80e001292cd2b5244bb7dade5171fd1dfb9010e6d84c23383ad9c07315f5b3a8bf0a27991e401ae139ef5da16b2f

  • SSDEEP

    3072:BMurSpD8Jnyc4QZ1MutrzXrZKFZGi4XXOxf6lBLkLMx:BMCkD8EbIzYMXX4fsH

Score
10/10

Malware Config

Extracted

Family

strela

C2

94.159.113.79

Attributes
  • url_path

    /up.php

Targets

    • Target

      __8E3C3DD5-336E-4B8E-BBA3-A798F1154CE6_.dll.bin

    • Size

      140KB

    • MD5

      654117d70d1dfbfa4c4cb322ffcd0da1

    • SHA1

      f6a14cd76cf15d3c0713532d291799a420d14208

    • SHA256

      7942f25cfd89477e50bd5ee39706bae8473e3c5d63642f5c58a80c361742edd1

    • SHA512

      85df87d6948661d4be7a49d94be18237d2cb80e001292cd2b5244bb7dade5171fd1dfb9010e6d84c23383ad9c07315f5b3a8bf0a27991e401ae139ef5da16b2f

    • SSDEEP

      3072:BMurSpD8Jnyc4QZ1MutrzXrZKFZGi4XXOxf6lBLkLMx:BMCkD8EbIzYMXX4fsH

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela family

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks