General
-
Target
5bab8dc21469e0cb7634663133a87b49
-
Size
109KB
-
Sample
240115-ayp1msfab3
-
MD5
5bab8dc21469e0cb7634663133a87b49
-
SHA1
410ee42993b8df0016a64fc6dcb8791302766742
-
SHA256
4dbff816078ea1a3d68f2c41d8f02b0e3f8d66abba23cfdb09f21e8610f11d48
-
SHA512
39bd26766b0670256730911676bb5e3d5deda2809a611db56a2c7841e8088f2ce71984f54a381e0c8ac542787a0f88e67ea6c9b4d00a90e33ba748e8914e4852
-
SSDEEP
3072:/0AI4r/zd/tssGMSRGXRK68dJOFdjSH8mRdV:MBEzd/tyRw8dgDjSNdV
Behavioral task
behavioral1
Sample
5bab8dc21469e0cb7634663133a87b49.jar
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5bab8dc21469e0cb7634663133a87b49.jar
Resource
win10v2004-20231215-en
Malware Config
Extracted
strrat
severdops.ddns.net:2201
-
license_id
P2AP-K06V-U430-8310-7K76
-
plugins_url
http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5
-
scheduled_task
true
-
secondary_startup
true
-
startup
true
Targets
-
-
Target
5bab8dc21469e0cb7634663133a87b49
-
Size
109KB
-
MD5
5bab8dc21469e0cb7634663133a87b49
-
SHA1
410ee42993b8df0016a64fc6dcb8791302766742
-
SHA256
4dbff816078ea1a3d68f2c41d8f02b0e3f8d66abba23cfdb09f21e8610f11d48
-
SHA512
39bd26766b0670256730911676bb5e3d5deda2809a611db56a2c7841e8088f2ce71984f54a381e0c8ac542787a0f88e67ea6c9b4d00a90e33ba748e8914e4852
-
SSDEEP
3072:/0AI4r/zd/tssGMSRGXRK68dJOFdjSH8mRdV:MBEzd/tyRw8dgDjSNdV
Score7/10-
Modifies file permissions
-