General
-
Target
00172976ee3057dd6555734af28759add7daea55047eb6f627e5491701c3ec83
-
Size
219KB
-
Sample
240129-vps16agcbn
-
MD5
7ac6ab0b4cd03b1cb7da928b324cb933
-
SHA1
71b0d8b34ceed49dc0a4f3a42dba42391475f302
-
SHA256
00172976ee3057dd6555734af28759add7daea55047eb6f627e5491701c3ec83
-
SHA512
b1c81159713d95312c0cfd46c67dd348714a45ec454f3e7752cce309eb2b089e6692400e40eb55cb080c671e7ab5f8ad20127b2b839966ab8f657a8d12effe94
-
SSDEEP
3072:SNTGUI+R4oVOQa7khVBUfC4OCnHvT1Yga8ZQH/MHVJy7knuuCceanPRMILYmfVIV:SgUJ4oi7PfNnPZYZMPy9AP2IEmfCHMtc
Behavioral task
behavioral1
Sample
00172976ee3057dd6555734af28759add7daea55047eb6f627e5491701c3ec83.jar
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
00172976ee3057dd6555734af28759add7daea55047eb6f627e5491701c3ec83.jar
Resource
win10v2004-20231215-en
Malware Config
Extracted
strrat
https://pastebin.com/raw/dFKy3ZDm:13570
https://pastebin.com/raw/dLzt4tRB:13569
-
license_id
W9MZ-7P83-CP8C-A4XM-IP0L
-
plugins_url
http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5
-
scheduled_task
true
-
secondary_startup
true
-
startup
true
Targets
-
-
Target
00172976ee3057dd6555734af28759add7daea55047eb6f627e5491701c3ec83
-
Size
219KB
-
MD5
7ac6ab0b4cd03b1cb7da928b324cb933
-
SHA1
71b0d8b34ceed49dc0a4f3a42dba42391475f302
-
SHA256
00172976ee3057dd6555734af28759add7daea55047eb6f627e5491701c3ec83
-
SHA512
b1c81159713d95312c0cfd46c67dd348714a45ec454f3e7752cce309eb2b089e6692400e40eb55cb080c671e7ab5f8ad20127b2b839966ab8f657a8d12effe94
-
SSDEEP
3072:SNTGUI+R4oVOQa7khVBUfC4OCnHvT1Yga8ZQH/MHVJy7knuuCceanPRMILYmfVIV:SgUJ4oi7PfNnPZYZMPy9AP2IEmfCHMtc
Score7/10-
Modifies file permissions
-