General
-
Target
68.jar
-
Size
219KB
-
Sample
240219-t4jwcsgc5x
-
MD5
48ff25a531c219087a0a071614c49f5b
-
SHA1
a2305ef71ada6632620165422f5d28dccf87e648
-
SHA256
680e2aed88d58236825214ef8639e6352c1f677766005c51697b045fb7ebcb5e
-
SHA512
ead4cb5b17857ffc24cfb9d7876cf96ee60238d0856f0a710348f0384473f1e4543a8c7d8a8b12438a6f47d125a26be512091a87b222423efc830933517b6e48
-
SSDEEP
6144:cd8xFVsAxU/B6CPGjEFUNCOmckrVZd+VbhSR:cOxFVp+QZ7CzVWba
Behavioral task
behavioral1
Sample
68.jar
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
68.jar
Resource
win10v2004-20231222-en
Malware Config
Extracted
strrat
https://pastebin.com/raw/67b8GSUQ:13470
https://pastebin.com/raw/8umPhg86:13469
-
license_id
AP9X-81G0-30TN-HSIO-6SFI
-
plugins_url
http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5
-
scheduled_task
true
-
secondary_startup
true
-
startup
true
Targets
-
-
Target
68.jar
-
Size
219KB
-
MD5
48ff25a531c219087a0a071614c49f5b
-
SHA1
a2305ef71ada6632620165422f5d28dccf87e648
-
SHA256
680e2aed88d58236825214ef8639e6352c1f677766005c51697b045fb7ebcb5e
-
SHA512
ead4cb5b17857ffc24cfb9d7876cf96ee60238d0856f0a710348f0384473f1e4543a8c7d8a8b12438a6f47d125a26be512091a87b222423efc830933517b6e48
-
SSDEEP
6144:cd8xFVsAxU/B6CPGjEFUNCOmckrVZd+VbhSR:cOxFVp+QZ7CzVWba
Score7/10-
Modifies file permissions
-