General

  • Target

    Delivery Information GCBAC71854_PDF.jar

  • Size

    182KB

  • MD5

    8b6d2e8ee9fb29b4095d861acbfa96f7

  • SHA1

    11189463a1f8558e688366fd47f6febfce3eb49b

  • SHA256

    6d641ee8729ed4c218ef958b79eef3729ec6317b7da31a41803407f41b68337a

  • SHA512

    944503c36f2358be6c1cf0c27166a1d3898a79b31081df36d61e4ff2101aa3f21d405df6c4217a8266bc1287abe753bd5e08d080e4e42e164cfe1b278e91176b

  • SSDEEP

    3072:zJjFn28eIl0XnNS87YO/YGHcTpVxjNVhp+K0dMfYDIO6LS/wxfs3Fl3ypGk04ADe:zJklXN7YAYgIpVbVhAndMf4p6LNGFl3+

Score
10/10

Malware Config

Extracted

Family

strrat

C2

194.15.112.53:6247

:

Attributes
  • license_id

    XRX6-YEF1-8ZTR-PBLU-HS8O

  • plugins_url

    http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5

  • scheduled_task

    true

  • secondary_startup

    true

  • startup

    true

Signatures

Files

  • Delivery Information GCBAC71854_PDF.jar
    .jar