General

  • Target

    056155b137e1ddc0de9570fbc67198ce

  • Size

    107KB

  • MD5

    056155b137e1ddc0de9570fbc67198ce

  • SHA1

    f3a3e2713659b7f0850dbb3ccd59af14a361e493

  • SHA256

    92eb16844e647e0f054c3a4b18d5dce0017a4baafccc7b8b02f679706ce3cf90

  • SHA512

    03fdb5ba8af6b79246a4febff533a0cc5bb1d12afc36bf04fc89b3eb77594a6e0e1c9ef9064e3facf8996bce00ab1e96a616ba0f103a98f8aa9d7b52c2d31290

  • SSDEEP

    3072:wtKk+eojbO/2IKV5nv6A67yFCM1zm2eY6Oj77Yxg:WKk+eoLVVv6DpFY6Oj7kxg

Score
10/10

Malware Config

Extracted

Family

strrat

C2

198.12.81.63:2277

127.0.0.1:2277

Attributes
  • license_id

    5VPP-ORQW-0W18-ANIH-5YFD

  • plugins_url

    http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5

  • scheduled_task

    true

  • secondary_startup

    true

  • startup

    true

Signatures

Files

  • 056155b137e1ddc0de9570fbc67198ce
    .jar