Behavioral task
behavioral1
Sample
67803465783202172024.PDF.jar
Resource
win7-20231215-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
67803465783202172024.PDF.jar
Resource
win10v2004-20231222-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
67803465783202172024.PDF.zip
-
Size
215KB
-
MD5
2fde0d14a30e2cd89b347d6a51b1fa02
-
SHA1
47c50800804e4fc1c13c39261419f7c31cf21a4b
-
SHA256
26409557fae189649d0979f398b455c1c5ca4399519ece1c4133db745c207fe3
-
SHA512
3a839753eda176a92e272ce62bd9965cf6490638a71e54c251aed5f2223541f5286f7b306a20bc95624eca404acabbb715be847bb7b9de4754747668b7d56d9b
-
SSDEEP
6144:R/P0GpN8C8GpSJZK+CdydPdIpGBbMc9UujhHJpv6H:R/P0GpN8CNofpCMdFHNjZJpCH
Score
10/10
Malware Config
Extracted
Family
strrat
C2
freeman.dsmtp.com:8082
Attributes
-
license_id
khonsari
-
plugins_url
http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5
-
scheduled_task
true
-
secondary_startup
true
-
startup
true
Signatures
-
Strrat family
Files
-
67803465783202172024.PDF.zip.zip
-
67803465783202172024.PDF.jar.jar