General

  • Target

    fedex.jar

  • Size

    218KB

  • MD5

    5d9397eaf7358098f07a34fb2f9a9b75

  • SHA1

    8efb6671110f2222e1118a191255fe83e19cfcb0

  • SHA256

    7ed4f66b4f7a0cb94c8e2cc2bc7b3eeb184a2295b02402d44fde48aee6b48e4b

  • SHA512

    987e9a14873351d6b8332486535b96c0f5d735f890ab391718fda99acfe618d7af55219e3267ba14d52b93b47e19dc9e93fae888bda0c2c9af0ac78b7a810b39

  • SSDEEP

    6144:3E99YWe6ssmWjK75QtXevAHG+iVZl4FjQyXz:WGWHA76VzViVHUjXD

Score
10/10

Malware Config

Extracted

Family

strrat

C2

94.156.144.39:8070

127.0.0.1:8070

Attributes
  • license_id

    EAF4-YLN4-SI61-3B46-LP7Q

  • plugins_url

    http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5

  • scheduled_task

    true

  • secondary_startup

    true

  • startup

    true

Signatures

Files

  • fedex.jar
    .jar