General

  • Target

    00c6403b831a9a510743b7cb1f3edc62

  • Size

    96KB

  • MD5

    00c6403b831a9a510743b7cb1f3edc62

  • SHA1

    83cb65673aa680082875b7795d71a3923142adeb

  • SHA256

    269ad9c64667ee8349c77e0917b256ec7b16cd256f02ba3fc7258b844a9742db

  • SHA512

    01fe9f7ac1faace5a77f2f1121c76ce1f762a8cc5a6f1e03c44b2ebf642558c42ce7cf9caffb229d73dac927460b124c34ec8fad9bf2078411ce451a5243e6f2

  • SSDEEP

    3072:g6XYBrmewh+tsLXyGZiv/JAlPu7HYnelp5BVHJ:g6QrmXXFIv/+YYeXLH

Score
10/10

Malware Config

Extracted

Family

strrat

C2

193.142.146.203:1981

ffv32223.ru:1980

Attributes
  • license_id

    AERU-ENCS-ONT9-41T2-97OJ

  • plugins_url

    http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5

  • scheduled_task

    true

  • secondary_startup

    true

  • startup

    true

Signatures

Files

  • 00c6403b831a9a510743b7cb1f3edc62
    .jar