General

  • Target

    67803465783202172024.PDF.zip

  • Size

    215KB

  • MD5

    2fde0d14a30e2cd89b347d6a51b1fa02

  • SHA1

    47c50800804e4fc1c13c39261419f7c31cf21a4b

  • SHA256

    26409557fae189649d0979f398b455c1c5ca4399519ece1c4133db745c207fe3

  • SHA512

    3a839753eda176a92e272ce62bd9965cf6490638a71e54c251aed5f2223541f5286f7b306a20bc95624eca404acabbb715be847bb7b9de4754747668b7d56d9b

  • SSDEEP

    6144:R/P0GpN8C8GpSJZK+CdydPdIpGBbMc9UujhHJpv6H:R/P0GpN8CNofpCMdFHNjZJpCH

Score
10/10

Malware Config

Extracted

Family

strrat

C2

freeman.dsmtp.com:8082

Attributes
  • license_id

    khonsari

  • plugins_url

    http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5

  • scheduled_task

    true

  • secondary_startup

    true

  • startup

    true

Signatures

Files

  • 67803465783202172024.PDF.zip
    .zip
  • 67803465783202172024.PDF.jar
    .jar