General
-
Target
8c967e80d69f6d0407af817acc034ee9
-
Size
110KB
-
Sample
240203-r2lwtsebdq
-
MD5
8c967e80d69f6d0407af817acc034ee9
-
SHA1
2dab6fb260d020c40b92280effb4c6f91a97b0ed
-
SHA256
945fddfc1fa07995d86ba94d167693ce80f462b3738a6c1c05a5557601aadf2f
-
SHA512
63a9f6fd6ec35bb67eebda6a4f1cbb75a2a4d76a800afbac9b04aa2b65a767aab917fd1ba9bfac96386949b7103f96f9b4b66b7eceb2c09f2506d1b465552e15
-
SSDEEP
1536:m+6lO77EyNyGSZTvdBxX5CJgOn1HAqnA/GSHLx4hVtjZZ30mlz9YfijW/lS6:mFyYJxX5eggArOSrehHZZEmlx9C/D
Behavioral task
behavioral1
Sample
8c967e80d69f6d0407af817acc034ee9.jar
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8c967e80d69f6d0407af817acc034ee9.jar
Resource
win10v2004-20231215-en
Malware Config
Extracted
strrat
51.255.83.207:77
-
license_id
Q700-KUYB-QL61-6VZM-ZMMN
-
plugins_url
http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5
-
scheduled_task
true
-
secondary_startup
true
-
startup
true
Targets
-
-
Target
8c967e80d69f6d0407af817acc034ee9
-
Size
110KB
-
MD5
8c967e80d69f6d0407af817acc034ee9
-
SHA1
2dab6fb260d020c40b92280effb4c6f91a97b0ed
-
SHA256
945fddfc1fa07995d86ba94d167693ce80f462b3738a6c1c05a5557601aadf2f
-
SHA512
63a9f6fd6ec35bb67eebda6a4f1cbb75a2a4d76a800afbac9b04aa2b65a767aab917fd1ba9bfac96386949b7103f96f9b4b66b7eceb2c09f2506d1b465552e15
-
SSDEEP
1536:m+6lO77EyNyGSZTvdBxX5CJgOn1HAqnA/GSHLx4hVtjZZ30mlz9YfijW/lS6:mFyYJxX5eggArOSrehHZZEmlx9C/D
Score7/10-
Modifies file permissions
-