General

  • Target
    https://filebin.ca/7daZAsXNH927/SHIPPINGBILL.PDF.zip
  • Sample231013-eblf6aeh73
Score
10/10

Malware Config

Extracted

Family
  • strrat

C2
  • giveandtake.mefound.com:8082

Attributes
  • license_id

    khonsari

  • plugins_url

    http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5

  • scheduled_task

    true

  • secondary_startup

    true

  • startup

    true

Targets

MITRE ATT&CK Enterprise v15

Tasks