Overview

overview

10

Static

static

10

e2580cc072...a0.jar

windows7-x64

1

e2580cc072...a0.jar

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    87c8f9664c3b71f0b26556c27ca32e80.bin

  • Size

    213KB

  • MD5

    d448ca98331250fc74571ee03cdfd32e

  • SHA1

    f1a4d632fc7534cb2f032263d6900e6aaae8bb17

  • SHA256

    b9de52fb718982e0fa909a62dc1d2eca78eb4845435d4817de1d7c655862a001

  • SHA512

    15e4e48491923b9c86dbccf70254967c552e6b2780e761602f303a6c731ae869e197d8127132ea3753d4e28d6e47a87c7bb874b68c9f3ad5a98a5c6a56d2ca3e

  • SSDEEP

    6144:3gAuaL1XMa4d++CqQ2FR7MC3Pep8iq9oGk:3TuED1hOxTPexGk

Score
10/10
strrat

Malware Config

Extracted

Family

strrat

C2

powerful.ddnsfree.com:7802

powerfull6.duckdns.org:7817
Attributes
  • license_id

    PZ7N-MEGA-746I-6O5N-OHCF

  • plugins_url

    http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5

  • scheduled_task

    true

  • secondary_startup

    true

  • startup

    true

Signatures

Files

  • 87c8f9664c3b71f0b26556c27ca32e80.bin
    .zip

    Password: infected

  • e2580cc0724e38ed889f6ac5ad4723c0d64a232090642ced085ddff3b2463fa0.jar
    .jar