General
- Target Swift_003001994805009873009940021984003_Bank_of_Baroda_export.jar
- Size 219KB
- Sample230904-ldly2afa71
- SHA256 c4cd51b66fcc4d76c7f78bcef5efe713d582a28bbf9875265d983be1f7f50716
- MD5 675aa2b049cb9a9cf67a8f8d6685b5ff
- SHA1 4232aa634ead0a682386aa7f627327a4b988fc41
- SHA512 9e6c9a23b0cc6c598bdf7a4076251e81f0b95747c6e7ae1c3b866d19cc18d43a30cfe68f2ad7a3d7f965144f232ed93dcf5a35a6e57cd2cbfacf8bf638fef4c8
- SSDEEP 6144:p0MnkQv7zA5TzTuGPY0z7zMz2T8MMkz40dvxbOA5p:ymzzA5T/H1744dE0r9p
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
Swift_003001994805009873009940021984003_Bank_of_Baroda_export.jar
Resource
win7-20230831-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Swift_003001994805009873009940021984003_Bank_of_Baroda_export.jar
Resource
win10v2004-20230831-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
strrat
C2
-
powerful.ddnsfree.com:7802
-
judepower.duckdns.org:7817
Attributes
-
license_id
EBGS-IHJV-5E77-T3MF-HBXL
-
plugins_url
http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5
-
scheduled_task
false
-
secondary_startup
true
-
startup
false
Targets
-
- Target Swift_003001994805009873009940021984003_Bank_of_Baroda_export.jar
- Size 219KB
- SHA256 c4cd51b66fcc4d76c7f78bcef5efe713d582a28bbf9875265d983be1f7f50716
- MD5 675aa2b049cb9a9cf67a8f8d6685b5ff
- SHA1 4232aa634ead0a682386aa7f627327a4b988fc41
- SHA512 9e6c9a23b0cc6c598bdf7a4076251e81f0b95747c6e7ae1c3b866d19cc18d43a30cfe68f2ad7a3d7f965144f232ed93dcf5a35a6e57cd2cbfacf8bf638fef4c8
- SSDEEP 6144:p0MnkQv7zA5TzTuGPY0z7zMz2T8MMkz40dvxbOA5p:ymzzA5T/H1744dE0r9p
- MD5 SHA1 SHA512 SSDEEP
Score4/10