General

  • Target

    m_AP Remittance - L - Ref S158578-3_PDF.zip

  • Size

    66KB

  • MD5

    e0626846ef33edb6013bcd2a81d733e6

  • SHA1

    4949e675c35df0be361abb5d793cb199dda90d8d

  • SHA256

    f7232989ee2ad63a73dac3203924245ee40cafe9a641141ffd8c7768e0853351

  • SHA512

    0e43fd3143a3f51f2af417e212596ba7f5ea8afbe7727943f7b517234557a29e9e82d47fafac5b63f3d2e8030a895a9c853c4ba7a12e8b811b24e4cb60807046

  • SSDEEP

    1536:/2ku+eZoYDPyhsHVYFD0u8OZG8doPBF4+rbT5TMEfo8H8E3hkC:en+eCOHVYePbnDPmEfo8H8E33

Score
10/10

Malware Config

Extracted

Family

strrat

C2

str01.3utilities.com:8888

127.0.0.1:8888

Attributes
  • license_id

    3H9W-V5UN-LQSP-Z89I-41OC

  • plugins_url

    http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5

  • scheduled_task

    true

  • secondary_startup

    true

  • startup

    true

Signatures

Files

  • m_AP Remittance - L - Ref S158578-3_PDF.zip
    .zip
  • AP Remittance - L - Ref S158578-4_PDF.jar
    .jar