General
-
Target
SalykFormJavaKZ.jar
-
Size
219KB
-
MD5
d0aed4975f9801c4b43148877db005f2
-
SHA1
db0a00cc513cf289d7cd7d63904b2298c0470421
-
SHA256
e35370cb7c8691b5fdd9f57f3f462807b40b067e305ce30eabc16e0642eca06b
-
SHA512
9ccbaf4c988abf8e4f32b8250510635bf6f4b40757c9b9521641c5fffc94f84207af9711fba8593904a6caf95e6c8eaae186c9ad14f47d519bd5929738bf226b
-
SSDEEP
3072:pCzWri3o5f2bxizASvhSkbExhjWtOdvubfIBVvaFo495OsqBMAM/eGJl825Miek:EV3U6MhSkbKldmIBVF4yBq/eslzGc
Score
10/10
Malware Config
Extracted
Family
strrat
C2
https://pastebin.com/raw/8umPhg86:13771
https://pastebin.com/raw/67b8GSUQ:13672
Attributes
-
license_id
AP9X-81G0-30TN-HSIO-6SFI
-
plugins_url
http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5
-
scheduled_task
true
-
secondary_startup
true
-
startup
true
Signatures
-
Strrat family
Files
-
SalykFormJavaKZ.jar