General

  • Target

    82ddfae819b4cb46144b03c2d68377fb.bin

  • Size

    202KB

  • MD5

    ba49a25de6d01149665524449570ce41

  • SHA1

    1d6658d2e8c24d97baac871e2bc4ce9146a23d96

  • SHA256

    82377f38aa1d3bd0989c66292eaf467b0912d16c18f76e79b201640cc9f519ca

  • SHA512

    fb6036ad1045b469a4122c01dee2db5d7e197eefdabe4ee4b74dd89b53dcb4ce7b3b43bfe3491fc9f7e749320c27c1c031c1e8090a301b5416a3ca4dd994e161

  • SSDEEP

    6144:xKAYQqQ+tXDU7hPIr3wa5XADzvBcZtrliO3a+yrc:xKA8nr3wa5X+rBUhATo

Score
10/10

Malware Config

Extracted

Family

strrat

C2

65.21.212.74:7800

Attributes
  • license_id

    DB1U-CVGT-7HUG-X0A0-GNWH

  • plugins_url

    http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5

  • scheduled_task

    true

  • secondary_startup

    true

  • startup

    true

Signatures

Files

  • 82ddfae819b4cb46144b03c2d68377fb.bin
    .zip

    Password: infected

  • 6b227cc81bae5fbe74537e84b2a57c5761a63b0b6bf26f84c305e56c2c4255ca.jar
    .jar