Overview

overview

10

Static

static

3

870acc691b...b1.dll

windows7-x64

10

870acc691b...b1.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    870acc691b29e3540cbdfff1c1f99d785a2c39920ab8dc692152b00ba81283b1.exe

  • Size

    174KB

  • Sample

    250204-2ssm5awpat

  • MD5

    260f9174f1f4e51b52d88669a18a439a

  • SHA1

    dfaef9c1b986f3292418c9f66b82bf33315537a9

  • SHA256

    870acc691b29e3540cbdfff1c1f99d785a2c39920ab8dc692152b00ba81283b1

  • SHA512

    e31c51d0b300e32da5e449f24f7dede4300f9ace1e25fdb79f5f68a536cb8b484912385047d840455d9f36d34d2f2789e499a125b5139c130b3bdd5b312165cc

  • SSDEEP

    3072:PmrC0+bi8Y21IB1yx7ASxbgmTntSDkXcHAqdqWATKN8zWAE5zY7:P/0+bix21wO7AVmD2IcHzJATKmCzO

Score
10/10
strelastealer

Malware Config

Extracted

Family

strela

C2

91.215.85.209

Attributes
  • url_path

    /server.php

  • user_agent

    Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537

Targets

    • Target

      870acc691b29e3540cbdfff1c1f99d785a2c39920ab8dc692152b00ba81283b1.exe

    • Size

      174KB

    • MD5

      260f9174f1f4e51b52d88669a18a439a

    • SHA1

      dfaef9c1b986f3292418c9f66b82bf33315537a9

    • SHA256

      870acc691b29e3540cbdfff1c1f99d785a2c39920ab8dc692152b00ba81283b1

    • SHA512

      e31c51d0b300e32da5e449f24f7dede4300f9ace1e25fdb79f5f68a536cb8b484912385047d840455d9f36d34d2f2789e499a125b5139c130b3bdd5b312165cc

    • SSDEEP

      3072:PmrC0+bi8Y21IB1yx7ASxbgmTntSDkXcHAqdqWATKN8zWAE5zY7:P/0+bix21wO7AVmD2IcHzJATKmCzO

    Score
    10/10
    strelastealer

    • Detects Strela Stealer payload

    • Strela family

      strela

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

      stealerstrela
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks