Overview

overview

10

Static

static

10

80c80561e6...75.jar

windows7-x64

1

80c80561e6...75.jar

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    80c80561e656f007aa888799f08da575

  • Size

    104KB

  • Sample

    240129-y526jsbedq

  • MD5

    80c80561e656f007aa888799f08da575

  • SHA1

    17567e2e1e359830412d1dca5315a143e0795983

  • SHA256

    a47f071e8df4ab89b53b927edcfaa38a61b5c56fd8c9346cc5b0e5a5a1abf54b

  • SHA512

    895697afe5b6d03952acff40950b40d04b7c7e5ac6d5f199d2f3da41842ff643ee374eb74f2dbe38510bf2acbaff88cb847419882f2b0083978085c4e02cbb63

  • SSDEEP

    1536:qcDy/IwhoFDhTaQRrTdPsm9Pfm9ZL7s+ib7keEEXniiC1O7BzFgO9WuDVLwCPq:qcDyf6VhjPnVyPs79Xn9C1ABxMcUmq

Score
10/10
strratdiscovery

Malware Config

Extracted

Family

strrat

C2

103.156.90.52:4292

127.0.0.1:4292
Attributes
  • license_id

    61DP-MVTK-7F5S-QIGT-AV1H

  • plugins_url

    http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5

  • scheduled_task

    true

  • secondary_startup

    true

  • startup

    true

Targets

    • Target

      80c80561e656f007aa888799f08da575

    • Size

      104KB

    • MD5

      80c80561e656f007aa888799f08da575

    • SHA1

      17567e2e1e359830412d1dca5315a143e0795983

    • SHA256

      a47f071e8df4ab89b53b927edcfaa38a61b5c56fd8c9346cc5b0e5a5a1abf54b

    • SHA512

      895697afe5b6d03952acff40950b40d04b7c7e5ac6d5f199d2f3da41842ff643ee374eb74f2dbe38510bf2acbaff88cb847419882f2b0083978085c4e02cbb63

    • SSDEEP

      1536:qcDy/IwhoFDhTaQRrTdPsm9Pfm9ZL7s+ib7keEEXniiC1O7BzFgO9WuDVLwCPq:qcDyf6VhjPnVyPs79Xn9C1ABxMcUmq

    Score
    7/10
    discovery
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks