General
- Target 06c02a92d723439a0ab48bc40a7608d3.bin
- Size 164KB
- Sample230901-bctx5sbd6v
- SHA256 404a60da6e5106d73dc438ac02327b721be5f7dbb4fe2d943571ea6f1d7619d8
- MD5 20c6eb2c706c6a171e0023e0f30b4271
- SHA1 3766e8aa4fb49682b7a3da3274e9409c7e5058ab
- SHA512 91f5046f5ad09e1e2e4c2f38eda056b81cd241d3d41d308964a3eaa341ba5c1a2bb4e41cd1db89787df2fe428f2b39df229363edd1d441091dafc102bde9f8fc
- SSDEEP 3072:mAoAh7bKEyrWMsu8UKIgVBhhr3KPD1SbdW+dOHd4Iw3AUA/fmUq4yGxmFzK:FoKHvi0uhgVJePpShCHOZ37A/rqouO
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
5a8822b39d40ecfeb5e7e53a1ba98c1a76b61c4362c132af4658e75074dc487d.jar
Resource
win7-20230831-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
5a8822b39d40ecfeb5e7e53a1ba98c1a76b61c4362c132af4658e75074dc487d.jar
Resource
win10v2004-20230831-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
strrat
C2
-
microsoftmicrosoftmicrosoft.ydns.eu:4145
-
lefteriskkokkiskikinew.ydns.eu:4142
Attributes
-
license_id
XUGN-HLIA-Z9LB-8NGB-WYLV
-
plugins_url
http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5
-
scheduled_task
true
-
secondary_startup
true
-
startup
true
Targets
-
- Target 5a8822b39d40ecfeb5e7e53a1ba98c1a76b61c4362c132af4658e75074dc487d.jar
- Size 170KB
- SHA256 5a8822b39d40ecfeb5e7e53a1ba98c1a76b61c4362c132af4658e75074dc487d
- MD5 06c02a92d723439a0ab48bc40a7608d3
- SHA1 978c736b5ee77722233bcc0e8318f0cdc733a927
- SHA512 6f2e758657cc32d2e16a3b946675b7d9a427842b9affba6ffbd73ae5fb8c26859adb8e9533dcfa8ad0ee5d05eddc0332c40d52b861c499615821dd9a4a386660
- SSDEEP 3072:aFYpxDousK0EvXzUGla/WFrxttDT/t6RcMoFVOfbBSooZX/nQ29BtfHOLN7g:8Yp1rCEvDUPMVX/t6Rlo/O8/dBVHv
- MD5 SHA1 SHA512 SSDEEP
Score4/10