General

  • Target

    8553abaf8344cad053d55fe59f527c9e

  • Size

    99KB

  • MD5

    8553abaf8344cad053d55fe59f527c9e

  • SHA1

    1173f23df96286b917ed5152d89b355a8d6aed4e

  • SHA256

    9177ca34e9e0244328e0b83f083b02e95bcd4893bcea21e216378ac3243333f6

  • SHA512

    59140beebae04b666fe30f7f80d2f32c5eefbce9bafc402aa7e99e534feec3a7d8a10f6fbe12a4a4b4654792d91d13e060bfa32ed245ec63ab9d5aac7d7b31f8

  • SSDEEP

    3072:uzn2hOVG6lpY0UTlB0o53BGFWaCu4h4q0FL2q:uahOPhUj0oLGFWlu4hGFV

Score
10/10

Malware Config

Extracted

Family

strrat

C2

severdops.ddns.net:2201

Attributes
  • license_id

    P2AP-K06V-U430-8310-7K76

  • plugins_url

    http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5

  • scheduled_task

    true

  • secondary_startup

    true

  • startup

    true

Signatures

Files

  • 8553abaf8344cad053d55fe59f527c9e
    .zip
  • IMAGE04082021.jar
    .jar