General

  • Target

    cc66d9d61597f59462925ce69e06bb10.dll.exe

  • Size

    136KB

  • Sample

    241120-s9bw9sypfy

  • MD5

    cc66d9d61597f59462925ce69e06bb10

  • SHA1

    74d13a3e40ac0f1fd6666940d118a89aa9b98cef

  • SHA256

    554a0fafdff6419b90496479a6612ea829b9ec76c5dd6ad14f7a8efca964a905

  • SHA512

    d6c3aaf94b8600e4490db990d227c15260eb3f02b5bd03ae671e07645c8887acaff60a387896739b73e7d75c392a324ce803ccef6bbd403570b91a7e1ff7311e

  • SSDEEP

    3072:3scrEJqXIvkehwvk/izYDB5WIIVkJt3ynvaJTjU:ccrXIvkbPUlQbKJ

Score
10/10

Malware Config

Extracted

Family

strela

C2

94.159.113.79

Attributes
  • url_path

    /up.php

Targets

    • Target

      cc66d9d61597f59462925ce69e06bb10.dll.exe

    • Size

      136KB

    • MD5

      cc66d9d61597f59462925ce69e06bb10

    • SHA1

      74d13a3e40ac0f1fd6666940d118a89aa9b98cef

    • SHA256

      554a0fafdff6419b90496479a6612ea829b9ec76c5dd6ad14f7a8efca964a905

    • SHA512

      d6c3aaf94b8600e4490db990d227c15260eb3f02b5bd03ae671e07645c8887acaff60a387896739b73e7d75c392a324ce803ccef6bbd403570b91a7e1ff7311e

    • SSDEEP

      3072:3scrEJqXIvkehwvk/izYDB5WIIVkJt3ynvaJTjU:ccrXIvkbPUlQbKJ

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela family

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks