General

  • Target

    98bd7eff931d0a20a64614e2d6091447

  • Size

    139KB

  • MD5

    98bd7eff931d0a20a64614e2d6091447

  • SHA1

    be35105b723d7ede14851220eb9db70359ccb493

  • SHA256

    d0c7d45da838c5c08119c59036ccce877fd7d2fc1c91e0d54268bedc5efc4120

  • SHA512

    212f712c8d08989aa8ca04dc9597924f8ff089202e402cfa08fb807d540aa4e556de128f73c593b68f36e5766df3f5a4ed66b6565521d97a5988878a5670e1bf

  • SSDEEP

    3072:xuUY7oQfALAYkjh0Exn+NWdt8rkO3xaQePA8llpf6hr:HTvxkjFdzMrkO3GAolpfSr

Score
10/10

Malware Config

Extracted

Family

strrat

C2

severdops.ddns.net:2201

Attributes
  • license_id

    P2AP-K06V-U430-8310-7K76

  • plugins_url

    http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5

  • scheduled_task

    true

  • secondary_startup

    true

  • startup

    true

Signatures

Files

  • 98bd7eff931d0a20a64614e2d6091447
    .eml
  • attachment-2
    .zip
  • SKM_C258201001130020005057.jar
    .jar
  • email-html-1.txt