General

  • Target
    07900321100.zip
  • Size 120KB
  • Sample231209-rmtywsacg8
  • SHA256 288ff2d664d112c5d94982aee0af7357df33c85649379f8a4c2ae08c13df9cc6
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • strrat

C2
  • lestencrypt.dnset.com:7888

  • lestencrypt.dnset.com:1780

Attributes
  • license_id

    M5NG-QCTM-00LM-3XXT-3I3E

  • plugins_url

    http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5

  • scheduled_task

    true

  • secondary_startup

    true

  • startup

    true

Targets

    • Target
      07900321100.jar
    • Size 126KB
    • SHA256 b8d23d8f9495c315a1a7c8daf8284f8407f0987d1b4f1d2c2880fa1fc62572a2
    • MD5 SHA1 SHA512 SSDEEP
    Score
    7/10

MITRE ATT&CK Enterprise v15

Tasks