General

  • Target

    7e2ab591bedbba74f8eec6456ae47d5d

  • Size

    102KB

  • MD5

    7e2ab591bedbba74f8eec6456ae47d5d

  • SHA1

    5c835fdf5fa55493eb7bc9a711a9cf417ded08ed

  • SHA256

    147a2f0b5db31df9dd9ed75cf520cf7b434e26e286392dadbbcaff90df219d28

  • SHA512

    b13365a04eb72e7aedaf8173a196b5ce4a24d81ba1462ac59fbaf7ec568d97b2760643c0d727a7bb125d6a8ce861786102dbbab9dc89fdcc8411cf7031dd5ca4

  • SSDEEP

    1536:rPApu9LxVwivNyje/xCkj4qzzrv1CVftcO7pChN1mb+n1EKF/FZ7FQo9y:xLHZp1jxzrv1C0Vhyb+n1EWdZ5Vy

Score
10/10

Malware Config

Extracted

Family

strrat

C2

103.156.90.52:4292

127.0.0.1:4292

Attributes
  • license_id

    61DP-MVTK-7F5S-QIGT-AV1H

  • plugins_url

    http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5

  • scheduled_task

    true

  • secondary_startup

    true

  • startup

    true

Signatures

Files

  • 7e2ab591bedbba74f8eec6456ae47d5d
    .jar