Overview

overview

10

Static

static

10

SalykFormJavaRU.jar

windows7-x64

1

SalykFormJavaRU.jar

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    SalykFormJavaRU.jar

  • Size

    219KB

  • Sample

    240201-qhtlwsdhh3

  • MD5

    14c6e272eb3038aa41a57f5c81fd9fb3

  • SHA1

    31ed947d4295f8ffdad8a1af78d08fb431919fc4

  • SHA256

    ee113a592431014f44547b144934a470a1f7ab4abec70ba1052a4feb3d15d5c6

  • SHA512

    651f36f008fb0be1117fb9cd81ce184e97032445c1fda759edb80837ece1a73c3872b5ab11db7f2fda8f8eb94b461678d8e3e2b7d771e8a30257f9565ed081e5

  • SSDEEP

    3072:puOsIqeGoQp3ep/Ae/me0CRXfAG3n1DiONTQZr0r78G+2/dpM/r1SioJuU2hTaXd:cURGoieee0CSyn1dNEyrk2LM/r1joI4t

Score
10/10
strratdiscovery

Malware Config

Extracted

Family

strrat

C2

https://pastebin.com/raw/8umPhg86:13771

https://pastebin.com/raw/67b8GSUQ:13672
Attributes
  • license_id

    AP9X-81G0-30TN-HSIO-6SFI

  • plugins_url

    http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5

  • scheduled_task

    true

  • secondary_startup

    true

  • startup

    true

Targets

    • Target

      SalykFormJavaRU.jar

    • Size

      219KB

    • MD5

      14c6e272eb3038aa41a57f5c81fd9fb3

    • SHA1

      31ed947d4295f8ffdad8a1af78d08fb431919fc4

    • SHA256

      ee113a592431014f44547b144934a470a1f7ab4abec70ba1052a4feb3d15d5c6

    • SHA512

      651f36f008fb0be1117fb9cd81ce184e97032445c1fda759edb80837ece1a73c3872b5ab11db7f2fda8f8eb94b461678d8e3e2b7d771e8a30257f9565ed081e5

    • SSDEEP

      3072:puOsIqeGoQp3ep/Ae/me0CRXfAG3n1DiONTQZr0r78G+2/dpM/r1SioJuU2hTaXd:cURGoieee0CSyn1dNEyrk2LM/r1joI4t

    Score
    7/10
    discovery
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks