Behavioral task
behavioral1
Sample
SMH-20230913-Price Request 10048269-SPNpdf(24.jar
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
SMH-20230913-Price Request 10048269-SPNpdf(24.jar
Resource
win10v2004-20230915-en
General
-
Target
SMH-20230913-Price Request 10048269-SPNpdf(24.jar
-
Size
219KB
-
MD5
c4e67ba3383277c12a611177bd855157
-
SHA1
dc1482e661557914df725612038bc3692278a582
-
SHA256
10f8c47ca11f6f225c60ccf117786bfe4c44f87a614e82f23343636e32fb195c
-
SHA512
f9f99d529d6aee72501a5678fb916222fa9f7868edb8a1c87282dbb9c2045fcfb76074c0dcfb2bbe67687a69f600505478200bf49585b7e3ae6366fb9501b463
-
SSDEEP
6144:b6cb2YEDCxANlVZjsKktMCjAHQrjo6B+a:p4UUjsVtbkQrbBL
Malware Config
Extracted
strrat
bmh-global.myfirewall.org:1414
-
license_id
NMW9-U4JI-9LTC-U9WX-QZTF
-
plugins_url
http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5
-
scheduled_task
true
-
secondary_startup
true
-
startup
true
Signatures
-
Strrat family
Files
-
SMH-20230913-Price Request 10048269-SPNpdf(24.jar.jar