General

  • Target

    9c2831025592e2ca7d1c83ae43343a0f8820a34a323dec0c5004be6c95730908

  • Size

    122KB

  • Sample

    240715-plcbca1blk

  • MD5

    4f567f81c52b6bd11263530df3bce081

  • SHA1

    e5c7b0b5a84ec1954e3b2c66c3af6973e5a395ad

  • SHA256

    9c2831025592e2ca7d1c83ae43343a0f8820a34a323dec0c5004be6c95730908

  • SHA512

    dd2e2e2df77768ff076c05a5f4e96b2066bcc54ca894a98f54f73be8c45e2d5238043bed45452a66f18e321402ed0b858f417f6ba3d554d4e6d8c903d98c0789

  • SSDEEP

    3072:e42zLsfBqdTSz8GqLctL/SAohFnmqoX+WraT:RBqrLm6tFnq+UE

Score
10/10

Malware Config

Extracted

Family

strela

C2

45.9.74.32

Attributes
  • url_path

    /out.php

  • user_agent

    Mozilla/4.0 (compatible)

Targets

    • Target

      9c2831025592e2ca7d1c83ae43343a0f8820a34a323dec0c5004be6c95730908

    • Size

      122KB

    • MD5

      4f567f81c52b6bd11263530df3bce081

    • SHA1

      e5c7b0b5a84ec1954e3b2c66c3af6973e5a395ad

    • SHA256

      9c2831025592e2ca7d1c83ae43343a0f8820a34a323dec0c5004be6c95730908

    • SHA512

      dd2e2e2df77768ff076c05a5f4e96b2066bcc54ca894a98f54f73be8c45e2d5238043bed45452a66f18e321402ed0b858f417f6ba3d554d4e6d8c903d98c0789

    • SSDEEP

      3072:e42zLsfBqdTSz8GqLctL/SAohFnmqoX+WraT:RBqrLm6tFnq+UE

    Score
    10/10
    • Detects Strela Stealer payload

    • Strela stealer

      An info stealer targeting mail credentials first seen in late 2022.

MITRE ATT&CK Matrix

Tasks