General

  • Target

    receipt.jar

  • Size

    119KB

  • Sample

    211118-vf9bsaegbk

  • MD5

    9ad46d68cef2e523d609722a475f70da

  • SHA1

    47be8d0f83157ebf5943b89d55ab6f1070193682

  • SHA256

    7d75276562942a6d767fb37475da7e34c5c908c0116a8b631eeb028bb627fd34

  • SHA512

    9ad7acfdd31d714a999eacca1695fcf396da4783aa9c9789416e05058d2e8af404f4a75d1283eb3a6b6e74c82f1483d6817b508940262a7b5815bc83eee9eb26

Malware Config

Targets

    • Target

      receipt.jar

    • Size

      119KB

    • MD5

      9ad46d68cef2e523d609722a475f70da

    • SHA1

      47be8d0f83157ebf5943b89d55ab6f1070193682

    • SHA256

      7d75276562942a6d767fb37475da7e34c5c908c0116a8b631eeb028bb627fd34

    • SHA512

      9ad7acfdd31d714a999eacca1695fcf396da4783aa9c9789416e05058d2e8af404f4a75d1283eb3a6b6e74c82f1483d6817b508940262a7b5815bc83eee9eb26

    • STRRAT

      STRRAT is a remote access tool than can steal credentials and log keystrokes.

    • Drops startup file

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks