MITRE ATT&CKsoftware (malware)

S1183 StrelaStealer

Published 2024-12-31 Modified 2025-03-10 Official page ↗
Domain
enterprise
Platforms
Windows
Version
1.0
Created
2024-12-31

Description

StrelaStealer is an information stealer malware variant first identified in November 2022 and active through late 2024. StrelaStealer focuses on the automated identification, collection, and exfiltration of email credentials from email clients such as Outlook and Thunderbird.

Related

Uses · MITRE ATT&CK (34)

  • T1027.015 Compression sub-technique
  • T1027.016 Junk Code Insertion sub-technique
  • T1480.002 Mutual Exclusion sub-technique
  • T1027.013 Encrypted/Encoded File sub-technique
  • T1036.008 Masquerade File Type sub-technique
  • T1622 Debugger Evasion technique
  • T1614.001 System Language Discovery sub-technique
  • T1059.007 JavaScript sub-technique
  • T1071.001 Web Protocols sub-technique
  • T1132.001 Standard Encoding sub-technique
  • T1574.001 DLL sub-technique
  • T1204.002 Malicious File sub-technique
  • T1059.001 PowerShell sub-technique
  • T1059.003 Windows Command Shell sub-technique
  • T1566.001 Spearphishing Attachment sub-technique
  • T1036.003 Rename Legitimate Utilities sub-technique
  • T1036.005 Match Legitimate Resource Name or Location sub-technique
  • T1027.002 Software Packing sub-technique
  • T1553.002 Code Signing sub-technique
  • T1552.001 Credentials In Files sub-technique
  • T1552.002 Credentials in Registry sub-technique
  • T1218.011 Rundll32 sub-technique
  • T1518 Software Discovery technique
  • T1497 Virtualization/Sandbox Evasion technique
  • T1480 Execution Guardrails technique
  • T1140 Deobfuscate/Decode Files or Information technique
  • T1001 Data Obfuscation technique
  • T1020 Automated Exfiltration technique
  • T1027 Obfuscated Files or Information technique
  • T1036 Masquerading technique
Show all 34 ›

References