General

  • Target

    80c80561e656f007aa888799f08da575

  • Size

    104KB

  • MD5

    80c80561e656f007aa888799f08da575

  • SHA1

    17567e2e1e359830412d1dca5315a143e0795983

  • SHA256

    a47f071e8df4ab89b53b927edcfaa38a61b5c56fd8c9346cc5b0e5a5a1abf54b

  • SHA512

    895697afe5b6d03952acff40950b40d04b7c7e5ac6d5f199d2f3da41842ff643ee374eb74f2dbe38510bf2acbaff88cb847419882f2b0083978085c4e02cbb63

  • SSDEEP

    1536:qcDy/IwhoFDhTaQRrTdPsm9Pfm9ZL7s+ib7keEEXniiC1O7BzFgO9WuDVLwCPq:qcDyf6VhjPnVyPs79Xn9C1ABxMcUmq

Score
10/10

Malware Config

Extracted

Family

strrat

C2

103.156.90.52:4292

127.0.0.1:4292

Attributes
  • license_id

    61DP-MVTK-7F5S-QIGT-AV1H

  • plugins_url

    http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5

  • scheduled_task

    true

  • secondary_startup

    true

  • startup

    true

Signatures

Files

  • 80c80561e656f007aa888799f08da575
    .jar