Overview

overview

10

Static

static

10

5a8822b39d...7d.jar

windows7-x64

1

5a8822b39d...7d.jar

windows10-2004-x64

4

Sharing

Copy URL Twitter E-mail

General

  • Target
    06c02a92d723439a0ab48bc40a7608d3.bin
  • Size 164KB
  • Sample230901-bctx5sbd6v
  • SHA256 404a60da6e5106d73dc438ac02327b721be5f7dbb4fe2d943571ea6f1d7619d8
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
strrat

Malware Config

Extracted

Family

  • strrat

C2

  • microsoftmicrosoftmicrosoft.ydns.eu:4145

  • lefteriskkokkiskikinew.ydns.eu:4142

Attributes
  • license_id

    XUGN-HLIA-Z9LB-8NGB-WYLV

  • plugins_url

    http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5

  • scheduled_task

    true

  • secondary_startup

    true

  • startup

    true

Signatures

File Explorer

  • 06c02a92d723439a0ab48bc40a7608d3.bin
    .zip 164KB
  • 5a8822b39d40ecfeb5e7e53a1ba98c1a76b61c4362c132af4658e75074dc487d.jar
    .jar 170KB

06c02a92d723439a0ab48bc40a7608d3.bin

  • SHA256 404a60da6e5106d73dc438ac02327b721be5f7dbb4fe2d943571ea6f1d7619d8
  • MD5 SHA1 SHA512 SSDEEP
Password
infected