General

  • Target

    00c6403b831a9a510743b7cb1f3edc62

  • Size

    96KB

  • Sample

    231229-xbyqlagac4

  • MD5

    00c6403b831a9a510743b7cb1f3edc62

  • SHA1

    83cb65673aa680082875b7795d71a3923142adeb

  • SHA256

    269ad9c64667ee8349c77e0917b256ec7b16cd256f02ba3fc7258b844a9742db

  • SHA512

    01fe9f7ac1faace5a77f2f1121c76ce1f762a8cc5a6f1e03c44b2ebf642558c42ce7cf9caffb229d73dac927460b124c34ec8fad9bf2078411ce451a5243e6f2

  • SSDEEP

    3072:g6XYBrmewh+tsLXyGZiv/JAlPu7HYnelp5BVHJ:g6QrmXXFIv/+YYeXLH

Score
10/10

Malware Config

Extracted

Family

strrat

C2

193.142.146.203:1981

ffv32223.ru:1980

Attributes
  • license_id

    AERU-ENCS-ONT9-41T2-97OJ

  • plugins_url

    http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5

  • scheduled_task

    true

  • secondary_startup

    true

  • startup

    true

Targets

    • Target

      00c6403b831a9a510743b7cb1f3edc62

    • Size

      96KB

    • MD5

      00c6403b831a9a510743b7cb1f3edc62

    • SHA1

      83cb65673aa680082875b7795d71a3923142adeb

    • SHA256

      269ad9c64667ee8349c77e0917b256ec7b16cd256f02ba3fc7258b844a9742db

    • SHA512

      01fe9f7ac1faace5a77f2f1121c76ce1f762a8cc5a6f1e03c44b2ebf642558c42ce7cf9caffb229d73dac927460b124c34ec8fad9bf2078411ce451a5243e6f2

    • SSDEEP

      3072:g6XYBrmewh+tsLXyGZiv/JAlPu7HYnelp5BVHJ:g6QrmXXFIv/+YYeXLH

    Score
    7/10

MITRE ATT&CK Matrix ATT&CK v13

Tasks