Resubmissions

31/08/2023, 13:35

230831-qv56fsfc8710

23/08/2023, 14:07

230823-re2zjacf231

General

  • Target
    shipping Bill.pdf.jar
  • Size 204KB
  • Sample230831-qv56fsfc87
  • SHA256 2be131ccb225a25840925193fca29db9699f5b5a53b78cb4b57ee5504f3bf0aa
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • strrat

C2
  • recoverall.dns05.com:8082

Attributes
  • license_id

    khonsari

  • plugins_url

    http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5

  • scheduled_task

    true

  • secondary_startup

    true

  • startup

    true

Signatures

File Explorer

  • shipping Bill.pdf.jar
    .jar 204KB

shipping Bill.pdf.jar

  • SHA256 2be131ccb225a25840925193fca29db9699f5b5a53b78cb4b57ee5504f3bf0aa
  • MD5 SHA1 SHA512 SSDEEP