General

  • Target

    98bd7eff931d0a20a64614e2d6091447

  • Size

    139KB

  • Sample

    231227-any6kahhfp

  • MD5

    98bd7eff931d0a20a64614e2d6091447

  • SHA1

    be35105b723d7ede14851220eb9db70359ccb493

  • SHA256

    d0c7d45da838c5c08119c59036ccce877fd7d2fc1c91e0d54268bedc5efc4120

  • SHA512

    212f712c8d08989aa8ca04dc9597924f8ff089202e402cfa08fb807d540aa4e556de128f73c593b68f36e5766df3f5a4ed66b6565521d97a5988878a5670e1bf

  • SSDEEP

    3072:xuUY7oQfALAYkjh0Exn+NWdt8rkO3xaQePA8llpf6hr:HTvxkjFdzMrkO3GAolpfSr

Score
10/10

Malware Config

Extracted

Family

strrat

C2

severdops.ddns.net:2201

Attributes
  • license_id

    P2AP-K06V-U430-8310-7K76

  • plugins_url

    http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5

  • scheduled_task

    true

  • secondary_startup

    true

  • startup

    true

Targets

    • Target

      SKM_C258201001130020005057.jar

    • Size

      107KB

    • MD5

      bf9f710ba1787558944c14a51c3caab8

    • SHA1

      8ae1f0e795b1aadc692964ac6ee27127fb7d6644

    • SHA256

      d12c23844f090115e9ab57ad9d53fefe49dbbe05a1766551d6b0dd916451965e

    • SHA512

      6b9d951521628e0fa58158e29d9dbeb511c053824575815c943d06f5d98375b7333be4f4cedcd4d864714735a8f9633bd960a58c0f177d7391de272e6a61ccf5

    • SSDEEP

      1536:JbnFYRwaRs91zJuDt6IulM3p6crzdUKW3CwxC5MQAssDgRmAWYGfq6gbyoLGgFo:kG91zaL3Usxe3S5AssDYvGi6g2hD

    Score
    7/10

MITRE ATT&CK Enterprise v15

Tasks