Behavioral task
behavioral1
Sample
6b227cc81bae5fbe74537e84b2a57c5761a63b0b6bf26f84c305e56c2c4255ca.jar
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6b227cc81bae5fbe74537e84b2a57c5761a63b0b6bf26f84c305e56c2c4255ca.jar
Resource
win10v2004-20231215-en
General
-
Target
82ddfae819b4cb46144b03c2d68377fb.bin
-
Size
202KB
-
MD5
ba49a25de6d01149665524449570ce41
-
SHA1
1d6658d2e8c24d97baac871e2bc4ce9146a23d96
-
SHA256
82377f38aa1d3bd0989c66292eaf467b0912d16c18f76e79b201640cc9f519ca
-
SHA512
fb6036ad1045b469a4122c01dee2db5d7e197eefdabe4ee4b74dd89b53dcb4ce7b3b43bfe3491fc9f7e749320c27c1c031c1e8090a301b5416a3ca4dd994e161
-
SSDEEP
6144:xKAYQqQ+tXDU7hPIr3wa5XADzvBcZtrliO3a+yrc:xKA8nr3wa5X+rBUhATo
Malware Config
Extracted
strrat
65.21.212.74:7800
-
license_id
DB1U-CVGT-7HUG-X0A0-GNWH
-
plugins_url
http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5
-
scheduled_task
true
-
secondary_startup
true
-
startup
true
Signatures
-
Strrat family
Files
-
82ddfae819b4cb46144b03c2d68377fb.bin.zip
Password: infected
-
6b227cc81bae5fbe74537e84b2a57c5761a63b0b6bf26f84c305e56c2c4255ca.jar.jar