General

  • Target

    opzkjztnty.zip

  • Size

    164KB

  • MD5

    250d09e650c301b53d00a703f39354d1

  • SHA1

    aeb977370e8e40c7323ecebe262d153ea59bd7c6

  • SHA256

    27f16f3e0ae8499d98a9b7537ff2619d54bc8a7d8350f3f547521eb5b39bdb6b

  • SHA512

    26130963ba22be6a76bba8d9d6345bf2cd3098f1ba77aa623deed44dd8552268e37b27c50d0fa2727a98a95c2abcdc4fab82838c4e28b9d3cf9987e0b0c5c352

  • SSDEEP

    3072:Yw81M/EYAmf2Es926lSu9TFrkVYOms/0dOM4rgx+Feg0xwLxY5cE:YzIfNTu9TiVYOme0PQFAxw9KP

Score
10/10

Malware Config

Extracted

Family

strrat

C2

judhglaq.gleeze.com:6725

194.180.49.39:6725

Attributes
  • license_id

    8167-P12C-Y1NJ-KGF0-AT9Z

  • plugins_url

    http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5

  • scheduled_task

    true

  • secondary_startup

    true

  • startup

    true

Signatures

Files

  • opzkjztnty.zip
    .jar