General

  • Target

    Zamwienie PO #0991546 20pcs_pdf(92KB).jar

  • Size

    218KB

  • MD5

    b03ff6dddff5ea21a129890deab5a9cd

  • SHA1

    89dec8305668280d967a7caeba81b87b0c43926f

  • SHA256

    4e01f52192ab0212716a2ac06c4e2eb539b93c3fc08fa429aacc7e683d74b061

  • SHA512

    7c9c3284bf43366fefb4ba94b6d58eb119427aeebfccb7d47942ff168e711c81887df3d7d29ce542e2134887d7e664612b0c8a8c1e94c3a895d4738563203f4c

  • SSDEEP

    6144:gyepr4uHxtA/7jOhXWnzqRv9TPvLXd6IH2x:KbLACRPFZ6aI

Score
10/10

Malware Config

Extracted

Family

strrat

C2

bmh-global.myfirewall.org:1414

Attributes
  • license_id

    NMW9-U4JI-9LTC-U9WX-QZTF

  • plugins_url

    http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5

  • scheduled_task

    true

  • secondary_startup

    true

  • startup

    true

Signatures

Files

  • Zamwienie PO #0991546 20pcs_pdf(92KB).jar
    .jar