General

  • Target

    2044330034000_30_08_2023.jar

  • Size

    170KB

  • MD5

    06c02a92d723439a0ab48bc40a7608d3

  • SHA1

    978c736b5ee77722233bcc0e8318f0cdc733a927

  • SHA256

    5a8822b39d40ecfeb5e7e53a1ba98c1a76b61c4362c132af4658e75074dc487d

  • SHA512

    6f2e758657cc32d2e16a3b946675b7d9a427842b9affba6ffbd73ae5fb8c26859adb8e9533dcfa8ad0ee5d05eddc0332c40d52b861c499615821dd9a4a386660

  • SSDEEP

    3072:aFYpxDousK0EvXzUGla/WFrxttDT/t6RcMoFVOfbBSooZX/nQ29BtfHOLN7g:8Yp1rCEvDUPMVX/t6Rlo/O8/dBVHv

Score
10/10

Malware Config

Extracted

Family

strrat

C2

microsoftmicrosoftmicrosoft.ydns.eu:4145

lefteriskkokkiskikinew.ydns.eu:4142

Attributes
  • license_id

    XUGN-HLIA-Z9LB-8NGB-WYLV

  • plugins_url

    http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5

  • scheduled_task

    true

  • secondary_startup

    true

  • startup

    true

Signatures

Files

  • 2044330034000_30_08_2023.jar
    .jar