General

  • Target

    인용하다.jar

  • Size

    171KB

  • MD5

    2a9ac7b1665ae6d0148cb3e6580f14da

  • SHA1

    fda52e6bd48d7991a84603ef44ac23b542b48682

  • SHA256

    ce2791e51d3ef809e866b0f06015b3ca51aa6216f5f8ff3d3a8bb65333ec372a

  • SHA512

    7377c76ecadf3a457fd35b875128736adc41081d521cd65792a98262629d8e38d364908674435b91a6cf5d9f811b262ebbc82d67a0b6b7d192077e4f622e8ce8

  • SSDEEP

    3072:ETEfvDusDeda4zz1RuHLRvpiRZbts9luBrMJYfVjA+ivewt1TEA3RQMJxEDWFF9T:ETECsDaNS8tsmrjfVs+iWMwhmDF9T

Score
10/10

Malware Config

Extracted

Family

strrat

C2

microsoftmicrosoftmicrosoft.ydns.eu:4145

lefteriskkokkiskikinew.ydns.eu:4142

Attributes
  • license_id

    XUGN-HLIA-Z9LB-8NGB-WYLV

  • plugins_url

    http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5

  • scheduled_task

    true

  • secondary_startup

    true

  • startup

    true

Signatures

Files

  • 인용하다.jar
    .jar