General

  • Target

    Pagamentobestellung0390000000103609830exworke.jar

  • Size

    219KB

  • MD5

    57156c0262212a2cf5cf6daf1b13b2f1

  • SHA1

    b402890d10d92b1373caf0601393ad6acee61b97

  • SHA256

    9a05e98cdbde44c6c6f244abd547df1e130f6d322c3d17815f0118a6fa8d22e2

  • SHA512

    4d4ef63bc40f3655c8f862f1bd42348802bc0f6117a5aed30ed98dd0032620e76a0cc2730252b39100f88fa44794462736b89bc5c9699331a12b3cb0ecb73300

  • SSDEEP

    6144:YL9zGBy3NaDM1vzamkGijBALLsKHxyMUh:YLz34QVamI4W

Score
10/10

Malware Config

Extracted

Family

strrat

C2

dogface.casacam.com:6605

dogface55.duckdns.org:6604

Attributes
  • license_id

    PZ7N-MEGA-746I-6O5N-OHCF

  • plugins_url

    http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5

  • scheduled_task

    false

  • secondary_startup

    true

  • startup

    true

Signatures

Files

  • Pagamentobestellung0390000000103609830exworke.jar
    .jar