Overview

overview

10

Static

static

1

ORDER-230425.jar

windows7-x64

10

ORDER-230425.jar

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ORDER-230425.jar.bin

  • Size

    70KB

  • Sample

    230501-yl85raaa2w

  • MD5

    9f3b0d35ef534831a0e1e9dea32528ab

  • SHA1

    e42e6863e46f5a633701b99dc5d9e083b76676b9

  • SHA256

    a6ada46bbcea8f166d59708a0e66a81b105f743244c8c985ce798dca92017314

  • SHA512

    248330c9c916c3a37e35bde0a63cee8ab3559842b419969b92d2173522f2608cdc23e730264563d7905251889b3fcfa2d473726fa960b573217919967c733c25

  • SSDEEP

    1536:WYBXGypq3c89ezGSATBbxsS9xCDPsfTF26F40GodxvYeQnArmF7tBj:Zhbh8B5VRnmPK2S4Dojv5SF73

Score
10/10
strratpersistencestealertrojan

Malware Config

Targets

    • Target

      ORDER-230425.jar.bin

    • Size

      70KB

    • MD5

      9f3b0d35ef534831a0e1e9dea32528ab

    • SHA1

      e42e6863e46f5a633701b99dc5d9e083b76676b9

    • SHA256

      a6ada46bbcea8f166d59708a0e66a81b105f743244c8c985ce798dca92017314

    • SHA512

      248330c9c916c3a37e35bde0a63cee8ab3559842b419969b92d2173522f2608cdc23e730264563d7905251889b3fcfa2d473726fa960b573217919967c733c25

    • SSDEEP

      1536:WYBXGypq3c89ezGSATBbxsS9xCDPsfTF26F40GodxvYeQnArmF7tBj:Zhbh8B5VRnmPK2S4Dojv5SF73

    Score
    10/10
    strratpersistencestealertrojan

    • STRRAT

      STRRAT is a remote access tool than can steal credentials and log keystrokes.

      trojanstealerstrrat

    • Drops startup file

    • Adds Run key to start application

      persistence

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks