General

  • Target
    07900321100.zip
  • Size 120KB
  • Sample231209-rmtywsacg8
  • SHA256 288ff2d664d112c5d94982aee0af7357df33c85649379f8a4c2ae08c13df9cc6
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • strrat

C2
  • lestencrypt.dnset.com:7888

  • lestencrypt.dnset.com:1780

Attributes
  • license_id

    M5NG-QCTM-00LM-3XXT-3I3E

  • plugins_url

    http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5

  • scheduled_task

    true

  • secondary_startup

    true

  • startup

    true

Signatures

File Explorer

  • 07900321100.zip
    .zip 120KB
  • 07900321100.jar
    .jar 126KB

07900321100.zip

  • SHA256 288ff2d664d112c5d94982aee0af7357df33c85649379f8a4c2ae08c13df9cc6
  • MD5 SHA1 SHA512 SSDEEP