General
-
Target
00c6403b831a9a510743b7cb1f3edc62
-
Size
96KB
-
Sample
231229-xbyqlagac4
-
MD5
00c6403b831a9a510743b7cb1f3edc62
-
SHA1
83cb65673aa680082875b7795d71a3923142adeb
-
SHA256
269ad9c64667ee8349c77e0917b256ec7b16cd256f02ba3fc7258b844a9742db
-
SHA512
01fe9f7ac1faace5a77f2f1121c76ce1f762a8cc5a6f1e03c44b2ebf642558c42ce7cf9caffb229d73dac927460b124c34ec8fad9bf2078411ce451a5243e6f2
-
SSDEEP
3072:g6XYBrmewh+tsLXyGZiv/JAlPu7HYnelp5BVHJ:g6QrmXXFIv/+YYeXLH
Behavioral task
behavioral1
Sample
00c6403b831a9a510743b7cb1f3edc62.jar
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
00c6403b831a9a510743b7cb1f3edc62.jar
Resource
win10v2004-20231215-en
Malware Config
Extracted
strrat
193.142.146.203:1981
ffv32223.ru:1980
-
license_id
AERU-ENCS-ONT9-41T2-97OJ
-
plugins_url
http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5
-
scheduled_task
true
-
secondary_startup
true
-
startup
true
Targets
-
-
Target
00c6403b831a9a510743b7cb1f3edc62
-
Size
96KB
-
MD5
00c6403b831a9a510743b7cb1f3edc62
-
SHA1
83cb65673aa680082875b7795d71a3923142adeb
-
SHA256
269ad9c64667ee8349c77e0917b256ec7b16cd256f02ba3fc7258b844a9742db
-
SHA512
01fe9f7ac1faace5a77f2f1121c76ce1f762a8cc5a6f1e03c44b2ebf642558c42ce7cf9caffb229d73dac927460b124c34ec8fad9bf2078411ce451a5243e6f2
-
SSDEEP
3072:g6XYBrmewh+tsLXyGZiv/JAlPu7HYnelp5BVHJ:g6QrmXXFIv/+YYeXLH
Score7/10-
Modifies file permissions
-