General

  • Target

    Shipping Bill No6755495Dt15012024_PDF.jar

  • Size

    222KB

  • Sample

    240116-l6ny4ahecj

  • MD5

    14db8178a5b70183069d0b1241fde9aa

  • SHA1

    b858836fe6d57f1c203f0ba751dca1ee2e970824

  • SHA256

    b77b00597857221d7bfaf1c929683f03d9b91dd7ba5701f020b5b80ada29a4b0

  • SHA512

    feae25b909f84c6aedc4ac2599b6abfa21cc53e0bcb75db0cbff0e0d48f7d43353c93ffc1bb2e910126c1d23b773fe2793a7f0bb62c3c6cef4c9281ba8b1f256

  • SSDEEP

    3072:TA5/s7+hnz/XRKRvOELjw4gP1SbGvGUO9XJNaewUcGEmfqFr4vD3Lukt8N+ueoTs:Sw+hnz/XRKfL5MBvebfer6qp0LMpJIr

Score
10/10

Malware Config

Extracted

Family

strrat

C2

electron.freeddns.com:8082

Attributes
  • license_id

    khonsari

  • plugins_url

    http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5

  • scheduled_task

    true

  • secondary_startup

    true

  • startup

    true

Targets

    • Target

      Shipping Bill No6755495Dt15012024_PDF.jar

    • Size

      222KB

    • MD5

      14db8178a5b70183069d0b1241fde9aa

    • SHA1

      b858836fe6d57f1c203f0ba751dca1ee2e970824

    • SHA256

      b77b00597857221d7bfaf1c929683f03d9b91dd7ba5701f020b5b80ada29a4b0

    • SHA512

      feae25b909f84c6aedc4ac2599b6abfa21cc53e0bcb75db0cbff0e0d48f7d43353c93ffc1bb2e910126c1d23b773fe2793a7f0bb62c3c6cef4c9281ba8b1f256

    • SSDEEP

      3072:TA5/s7+hnz/XRKRvOELjw4gP1SbGvGUO9XJNaewUcGEmfqFr4vD3Lukt8N+ueoTs:Sw+hnz/XRKfL5MBvebfer6qp0LMpJIr

    Score
    7/10

MITRE ATT&CK Enterprise v15

Tasks