Skip to main content

StrelaStealer

Malware Family

4 826 indicators of compromise attributed to StrelaStealer across abuse.ch threat intelligence feeds.

Domains

11

IPs

0

URLs

3

Hashes

4 812

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

For continuous updates, the same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&CpayloadPayload Delivery

Sample indicators

IndicatorType
spsolutions.cadomain
backendkitchen.comdomain
doctoracristinachacon.comdomain
naszrafel.hudomain
hajighani-sons.comdomain
www.sucre.sserver-updatesystemonling.topdomain
archouse.orgdomain
fern-song.pages.devdomain
polar-willow-comet.pages.devdomain
lemon-hill7.pages.devdomain
medmakine.comdomain
https://lemon-hill7.pages.dev/win/index.php?vq=mIkU125tvDTrm29Wcxr3HjBWbDVXaUMxKzNKdEcvR1U2MEtqbXY1VkVLdkgxSWE1U1dnbVRzRmFkeU9ZYWVMWWU2R3ZDMGZ1Y1NjcGZ4bXF6ekJrSkJsNjEzNEwza3lBVnlJcXNOVis3TUtRQlRaaUlBV1hIMGIvUmRkdTMrVzhYeERkUGk1RCtmUmw5OC9GcUhMM0tGL3lqazhpZDFMUStsLzJVRlltYW1jWEZiOUpVK0tkL21IR2FpTml3eVZPMzlVTm1mbDFVV3F3akRSTg==url
https://fern-song.pages.dev/win/index.php?vq=7ZNbQwNzBJ2yll0ZkiqiA2QyREYyaVMwT1BCOTFPb1JEeHRNL2dLNVNDc2UvMDVlNmFpWkJPeHFyazl1VGpHUzA4MXRRamttLzVKOTI4R2ptaHcxeGtsUHhPTXlneFFCTWJjZGNUNkZteDRDRm43K2ovVXBZMjlVU3lISDdLdlREZlBrMG9UL1RYUkFiYWhBQmxTS09vMVJuMUcyM2w2U1JGT29VUm5ITmJRSmZFOFdCbUIrSVIxbVdTdWxPVGdjWXQxNXIrZ1kyUlZvcmQ1ZQ==url
https://polar-willow-comet.pages.dev/win/index.php?vq=dIjPdmJg8VKQ7DAHcDcz/ktPUXRhNU0vV3phVGNlb0IrbGE1TGdYYlZkMXJrUXJlaWdDYUE1aHF0Si9McmYzdmlNdUVVc2RUZXBDQ3AvSzU0b1FXQ2ZTTklxYjRuU25pQlo2NDZXOHFsdFdRejZNWGpPMG5STUVLZ0V4b0VRUHRIU1NxeFRKOXVrWDFBV3AwdHdBZ2F0emJuUUlVVVc1Y2F2d2lTMjZUVWdpOWoyZDJwSzNBZ2poVUdvYnk1Q0xtQ0tWOG1CZmNRblMyNUpGLw==url
f61fe8ac85b40d4cc559c97d09bf83629908b9c5e3b713d130e18cadb6b29d4ahash
f82c9aaa98811e3487c700a9a6a7e0140d1bc4a526a477164e0e4da60160fe7fhash
671c71aff349fec099893122f788760ffd7576409a0a871ca5d790ea2eba33e6hash
735c1d83f5810b459b439a9950433bf270434f0090c88b2a976e261e6b658e4chash
d847b126f133e7df01062c997c8d2edd0f5f28c6f657a7af095bf26608aff081hash
8a490922cf5fe7a2f4a5b84942188d8fe2d4e2aa365dc56e63249ce2bcff82e3hash
c671c87dce61b1596076ea91342f1a6f353913596154a9b3cb2a3d39e35bfd79hash
77f77e79bf2e6468ae56b7ccd6c78d03d7b629ccd4bbb91075d3acc3aec24185hash
4b868b0706893e0c371e98d81c92f7dfe06a771be004ad23a2449eba1728e42fhash
04b8430048c52b0d9d0b973456af1bb9ec41b09c831a5bfb84106c76c73e3316hash
6ac90c38cf6e1ae70475c94bb8182345f9e738e4f73524bd3cd3bb56548a8bd6hash
a0e8018f7ba107b2e8644562ff2f452bc4b4837061ae556bedb2b7f67f7944e7hash
c527049716c424715cee22761c7e1d8a0992de0ad79ca95a70b20195368fb5bfhash
3445a347a9003486242e9edc3258100b19efdcab1b536686760cf2cc38e8936ahash
91e220658fcecda01abe2ecea402b7d263a3404c744e8d73e517165173b6efcdhash
518ddfe8137653b6252e3c2a8f7161cd378a4b551d2a4653bb32eaf7058ecb13hash
f9dd6cf8d09b660d58e442808fce069b63193bff250a3a198fef5b7d112ee159hash
742b3a1c25a8a498f77ecf3798660e1dda31bfe7c3d2631777a44f0081bd6788hash
8770f96fbbceb6a4cb47f96d923a914ac2ba22fa6e7520e2c34adbecb00deaa2hash
79b4d1fa21052336138e0b59f3d53d53677f6257bd3f190e6eadccf935bc29b1hash

Another file to check? Run a file hash reputation check.