General
- Target 07900321100.zip
- Size 120KB
- Sample231209-rmtywsacg8
- SHA256 288ff2d664d112c5d94982aee0af7357df33c85649379f8a4c2ae08c13df9cc6
- MD5 9d4d7fe5b3307017f98dce21bb142547
- SHA1 efe4c9165cc6a180714c3349914e2acc1bd02513
- SHA512 71b0209807d8c12f0a6735daaf871c72083fc8b00344e4d356a030d2a6b9c1881d39fe34976796e98169f6d32e2e53a5b6adfe81876b54d97ca56228d727508c
- SSDEEP 3072:4AQm0U70otY5QfxDP97pScxdC88vRwrxACqja4fhwk:4AQm0U70o7DFtf+vR+ACq+OhV
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
07900321100.jar
Resource
win7-20231129-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
07900321100.jar
Resource
win10v2004-20231127-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
strrat
C2
-
lestencrypt.dnset.com:7888
-
lestencrypt.dnset.com:1780
Attributes
-
license_id
M5NG-QCTM-00LM-3XXT-3I3E
-
plugins_url
http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5
-
scheduled_task
true
-
secondary_startup
true
-
startup
true
Targets
-
- Target 07900321100.jar
- Size 126KB
- SHA256 b8d23d8f9495c315a1a7c8daf8284f8407f0987d1b4f1d2c2880fa1fc62572a2
- MD5 5f73f282fd6efe7a9c426b3782a99483
- SHA1 d9d2945053aab6d20b4154c763780300f867ade9
- SHA512 ce11ba9e1b7e1c084fe6328b0c4dcb753b878befd1453cebf47447475787dd5945d6b3a81e46ecbe29630e3cefb8f5c2ddc0e3b73da3781508da7b3250fbc3a9
- SSDEEP 1536:lNI8XP1F0tURwTD9OaEPXs0JJSSk48P+KMm2gpEg0HaoUX1XgP4pRS8fP4HRsMu+:lNRyOPbJ6rJCg0Nd4phfP42MlF/E4
- MD5 SHA1 SHA512 SSDEEP
Score7/10Modifies file permissions