General
-
Target
Shipping Bill No6755495Dt15012024_PDF.jar
-
Size
222KB
-
Sample
240116-l6ny4ahecj
-
MD5
14db8178a5b70183069d0b1241fde9aa
-
SHA1
b858836fe6d57f1c203f0ba751dca1ee2e970824
-
SHA256
b77b00597857221d7bfaf1c929683f03d9b91dd7ba5701f020b5b80ada29a4b0
-
SHA512
feae25b909f84c6aedc4ac2599b6abfa21cc53e0bcb75db0cbff0e0d48f7d43353c93ffc1bb2e910126c1d23b773fe2793a7f0bb62c3c6cef4c9281ba8b1f256
-
SSDEEP
3072:TA5/s7+hnz/XRKRvOELjw4gP1SbGvGUO9XJNaewUcGEmfqFr4vD3Lukt8N+ueoTs:Sw+hnz/XRKfL5MBvebfer6qp0LMpJIr
Behavioral task
behavioral1
Sample
Shipping Bill No6755495Dt15012024_PDF.jar
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
Shipping Bill No6755495Dt15012024_PDF.jar
Resource
win10v2004-20231222-en
Malware Config
Extracted
strrat
electron.freeddns.com:8082
-
license_id
khonsari
-
plugins_url
http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5
-
scheduled_task
true
-
secondary_startup
true
-
startup
true
Targets
-
-
Target
Shipping Bill No6755495Dt15012024_PDF.jar
-
Size
222KB
-
MD5
14db8178a5b70183069d0b1241fde9aa
-
SHA1
b858836fe6d57f1c203f0ba751dca1ee2e970824
-
SHA256
b77b00597857221d7bfaf1c929683f03d9b91dd7ba5701f020b5b80ada29a4b0
-
SHA512
feae25b909f84c6aedc4ac2599b6abfa21cc53e0bcb75db0cbff0e0d48f7d43353c93ffc1bb2e910126c1d23b773fe2793a7f0bb62c3c6cef4c9281ba8b1f256
-
SSDEEP
3072:TA5/s7+hnz/XRKRvOELjw4gP1SbGvGUO9XJNaewUcGEmfqFr4vD3Lukt8N+ueoTs:Sw+hnz/XRKfL5MBvebfer6qp0LMpJIr
Score7/10-
Modifies file permissions
-