General

  • Target

    33ede71b4b1c854c3af8d035947a1cb0e8bd6eefcca74eb17f42fdf002e0b856_JC.jar

  • Size

    219KB

  • MD5

    5399fb6e453415e22574998ee5b44242

  • SHA1

    3d5ee081d6230987522b37e76cb9e41f5702bc62

  • SHA256

    33ede71b4b1c854c3af8d035947a1cb0e8bd6eefcca74eb17f42fdf002e0b856

  • SHA512

    a0efb52e2747fc8437f3b84f475459a05a0d0fec55eceb775043be0732de022e65c87621001cd4bbb2d16335bc57f8b9e1f4573cfd8c0673e79c3ad4b4771be9

  • SSDEEP

    3072:xilYsXK53c0nlcI4xR4p8b/M95/nu9duVviB1xQkJ641whWPaG2/YdjiVNh+Zt0B:ElYsXA3CkF/TVuxQki0bCYdjKcZtk

Score
10/10

Malware Config

Extracted

Family

strrat

C2

172.93.181.218:8980

127.0.0.1:8980

Attributes
  • license_id

    FX7Y-S8H4-DZOR-QUCL-K55Z

  • plugins_url

    http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5

  • scheduled_task

    true

  • secondary_startup

    true

  • startup

    true

Signatures

Files

  • 33ede71b4b1c854c3af8d035947a1cb0e8bd6eefcca74eb17f42fdf002e0b856_JC.jar
    .jar