Overview

overview

10

Static

static

10

PO_28200199HE_Pdf.jar

windows7-x64

1

PO_28200199HE_Pdf.jar

windows10-2004-x64

4

Sharing

Copy URL
Twitter E-mail

General

  • Target

    PO_28200199HE_Pdf.jar

  • Size

    218KB

  • Sample

    230921-gxledsdg6y

  • MD5

    8b8de4ceeb8f0ba125507c058c27f962

  • SHA1

    f86b3d53becdb570c06f0e42cfec1807ab1228b4

  • SHA256

    d59996773811c898871ffcd59e868bda48e5d1168fcc5325f3fd597b3bb836ed

  • SHA512

    e4bef220833914da9048b497362644c53cfca68046cfa7b067c199279413bc0c1044b1d5dd09f7ea74b57ebf269cb7746beb9f1f830f734fe915cdda33072417

  • SSDEEP

    6144:vmmcPU4fTJk6+CtUtqHTyjX9z5PESg020Co58m+yCh8aT:vmmcPU4fTO6+Ct6qHTy/ES00Co58mQW0

Score
10/10
strrat

Malware Config

Extracted

Family

strrat

C2

oluwashowmercy.hopto.org:7888

127.0.0.1:7888
Attributes
  • license_id

    0V8J-34N3-VW97-SB5T-WHHZ

  • plugins_url

    http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5

  • scheduled_task

    false

  • secondary_startup

    false

  • startup

    true

Targets

    • Target

      PO_28200199HE_Pdf.jar

    • Size

      218KB

    • MD5

      8b8de4ceeb8f0ba125507c058c27f962

    • SHA1

      f86b3d53becdb570c06f0e42cfec1807ab1228b4

    • SHA256

      d59996773811c898871ffcd59e868bda48e5d1168fcc5325f3fd597b3bb836ed

    • SHA512

      e4bef220833914da9048b497362644c53cfca68046cfa7b067c199279413bc0c1044b1d5dd09f7ea74b57ebf269cb7746beb9f1f830f734fe915cdda33072417

    • SSDEEP

      6144:vmmcPU4fTJk6+CtUtqHTyjX9z5PESg020Co58m+yCh8aT:vmmcPU4fTO6+Ct6qHTy/ES00Co58mQW0

    Score
    4/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks