General

  • Target

    10f8c47ca11f6f225c60ccf117786bfe4c44f87a614e82f23343636e32fb195c_JC.jar

  • Size

    219KB

  • MD5

    c4e67ba3383277c12a611177bd855157

  • SHA1

    dc1482e661557914df725612038bc3692278a582

  • SHA256

    10f8c47ca11f6f225c60ccf117786bfe4c44f87a614e82f23343636e32fb195c

  • SHA512

    f9f99d529d6aee72501a5678fb916222fa9f7868edb8a1c87282dbb9c2045fcfb76074c0dcfb2bbe67687a69f600505478200bf49585b7e3ae6366fb9501b463

  • SSDEEP

    6144:b6cb2YEDCxANlVZjsKktMCjAHQrjo6B+a:p4UUjsVtbkQrbBL

Score
10/10

Malware Config

Extracted

Family

strrat

C2

bmh-global.myfirewall.org:1414

Attributes
  • license_id

    NMW9-U4JI-9LTC-U9WX-QZTF

  • plugins_url

    http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5

  • scheduled_task

    true

  • secondary_startup

    true

  • startup

    true

Signatures

Files

  • 10f8c47ca11f6f225c60ccf117786bfe4c44f87a614e82f23343636e32fb195c_JC.jar
    .jar