Overview

overview

10

Static

static

shippingdocuments.jar

windows7-x64

10

shippingdocuments.jar

windows10-2004-x64

4

Sharing

Copy URL Twitter E-mail

General

  • Target

    e3d8732fff1663bef6d8dc70b92e53c6.zip

  • Size

    94KB

  • Sample

    220929-lz3hxabdhk

  • MD5

    e3d8732fff1663bef6d8dc70b92e53c6

  • SHA1

    1d4aeffde4a9fc77d7856868d4f64155e339e7e1

  • SHA256

    ab60e189c1e10b89e74e8b43b966f2a2e1b671ce1df53a229200921790c7bc42

  • SHA512

    951e96189e2c8aed12fda8a55a88e4aa9cff6ac8bb42ccce1ecebd544f106e8f51486603157b478cf133beec931fa7145613239a232314c1b6626d974c409963

  • SSDEEP

    1536:I3UJcwVdfKNBgjHQLFl24de2l6LhXLnlkR81Z8QTBEHdumHJ8lwWyV1PoRTAc:BJcwLfKaal24deY6LpmuTBmbHJ8uBVK/

Score
10/10
strratpersistencestealertrojan

Malware Config

Targets

    • Target

      shippingdocuments.jar

    • Size

      100KB

    • MD5

      524706786a94f334678e6ee347515084

    • SHA1

      ae8ee6c46173b542f04d5a4344cd52071c49350d

    • SHA256

      78a9eef4a253a83c52cd85d809f85a86ce79d59e0614176578ed9d4895a2154d

    • SHA512

      11ab458d5e60c832ae118cba0dde60d316484c1247b6bdfdd3cb681368a25aba4a72e8b4a75c661476a61176af6a03772b3942b0828595144744a87462dd240f

    • SSDEEP

      3072:XMS1bcJ2Fp/BG5sm3XiB/0Z7GwwEPXfil:XMWz3/B7orV4

    Score
    10/10
    strratpersistencestealertrojan

    • STRRAT

      STRRAT is a remote access tool than can steal credentials and log keystrokes.

      trojanstealerstrrat

    • Drops startup file

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks