General

  • Target

    25eb4023fba770092e7817c41ee2af7f

  • Size

    96KB

  • MD5

    25eb4023fba770092e7817c41ee2af7f

  • SHA1

    9388e6a1a243555daa485892d2a4269d0827cab0

  • SHA256

    bf25d7b400a7512ea948f5d98b39bf4729e3292f65dff05a289b779c25d23cea

  • SHA512

    213a2e2431582ad7233aedf88a537e23294d55b9688bdaaee7043321a33843e3051ff056539349fce5776532ddb7929d4873d6aeee0334ea78810fe4fb312149

  • SSDEEP

    3072:CNINhFRrqZepZsmWPPhRj4gvUpZ4/05V/:CXZ6spPjjRcpK0T/

Score
10/10

Malware Config

Extracted

Family

strrat

C2

dollarsat.dynamic-dns.net:1781

dollarsat.dynamic-dns.net:1780

Attributes
  • license_id

    khonsari

  • plugins_url

    http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5

  • scheduled_task

    true

  • secondary_startup

    true

  • startup

    true

Signatures

Files

  • 25eb4023fba770092e7817c41ee2af7f
    .zip
  • 000122223.jar
    .jar