Overview

overview

10

Static

static

10

79d2b79bad...92.jar

windows7-x64

1

79d2b79bad...92.jar

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    79d2b79bad5f52b3bd2e82327f871c92

  • Size

    106KB

  • Sample

    240127-kzs4ssafgk

  • MD5

    79d2b79bad5f52b3bd2e82327f871c92

  • SHA1

    b0f67fa71525e2f843e73e84661ee638b0463f30

  • SHA256

    920d80efcbeee1a05139ffbea05ca56e59e71809d11afbe47d1e2e9aa95a0e5b

  • SHA512

    5b335834449a94a6565bc5f26e50d248b3cf59ad7e31465e5522ebaf80d39ed9816e1f86c47e85a608ae16968b6f3636c1b521a822afef24f53826b17c3fcd75

  • SSDEEP

    1536:yT5QD5oMXaPkkqyGhbeIZtVg2XEMV8UjiQB0YLt2tE6Ys0XVdZnG1HV0+gCtQ:yKaqyG0NY7BGYkos+VdFaa+gCtQ

Score
10/10
strratdiscovery

Malware Config

Extracted

Family

strrat

C2

103.133.105.29:2664

127.0.0.1:2664
Attributes
  • license_id

    FDFL-86AF-249Z-UP6D-RTBW

  • plugins_url

    http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5

  • scheduled_task

    true

  • secondary_startup

    true

  • startup

    true

Targets

    • Target

      79d2b79bad5f52b3bd2e82327f871c92

    • Size

      106KB

    • MD5

      79d2b79bad5f52b3bd2e82327f871c92

    • SHA1

      b0f67fa71525e2f843e73e84661ee638b0463f30

    • SHA256

      920d80efcbeee1a05139ffbea05ca56e59e71809d11afbe47d1e2e9aa95a0e5b

    • SHA512

      5b335834449a94a6565bc5f26e50d248b3cf59ad7e31465e5522ebaf80d39ed9816e1f86c47e85a608ae16968b6f3636c1b521a822afef24f53826b17c3fcd75

    • SSDEEP

      1536:yT5QD5oMXaPkkqyGhbeIZtVg2XEMV8UjiQB0YLt2tE6Ys0XVdZnG1HV0+gCtQ:yKaqyG0NY7BGYkos+VdFaa+gCtQ

    Score
    7/10
    discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks