General

  • Target

    a14320e418691e19a1dcc5fbb3a5c950

  • Size

    108KB

  • MD5

    a14320e418691e19a1dcc5fbb3a5c950

  • SHA1

    753ad196ba9325963be982be083defa61e58e876

  • SHA256

    d21387f0e105c87fbe306d01cecb7b157ee02978875af513fc0733cbc5a52cf5

  • SHA512

    da8b9b1693072b57cd181296ed5fd2f1e571b12d4c4419079e2bba07243aee7e772aa85009a8b97026207a3e8e9536144d005dbdd8a7a11d181d109578d1ebc8

  • SSDEEP

    3072:bZ07hOYZ860cicigzJsJG+Aq1tb+xxgv6Y:tehOY/PicpCGnytb+xo

Score
10/10

Malware Config

Extracted

Family

strrat

C2

51.255.83.207:77

Attributes
  • license_id

    Q700-KUYB-QL61-6VZM-ZMMN

  • plugins_url

    http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5

  • scheduled_task

    true

  • secondary_startup

    true

  • startup

    true

Signatures

Files

  • a14320e418691e19a1dcc5fbb3a5c950
    .jar