General
- Target a3c158be8374abd88fa2017ed42b1993
- Size 79KB
- Sample240225-pe82qsbb74
- SHA256 541593de78f03a5c0fe6aa5146148b320daa1582e1940d8f53530daa9d839a18
- MD5 a3c158be8374abd88fa2017ed42b1993
- SHA1 32a0e441efd32cfe7b052f4b39cec6bf7210ef0f
- SHA512 d3b15193f948d34bb6b7560e0fb51a228354bb3bf0c2b12836ebe38ac0e9f93968acff79d23d540c34f64c2ec241a4211a6e78613d4412362cfbff4f2eab22be
- SSDEEP 1536:BUukjxiLjb9Atk31fd7UiBrqYYZ3Nz+2SN+n1cswwiCT3ZbR2OLaztWf31ns:ByjxiBAtuZjp/YNNz+2SN+n19di83ZbY
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
a3c158be8374abd88fa2017ed42b1993.jar
Resource
win7-20240221-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
a3c158be8374abd88fa2017ed42b1993.jar
Resource
win10v2004-20240221-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
strrat
C2
-
51.161.197.23:77
Attributes
-
license_id
Q700-KUYB-QL61-6VZM-ZMMN
-
plugins_url
http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5
-
scheduled_task
true
-
secondary_startup
true
-
startup
true
Targets
-
- Target a3c158be8374abd88fa2017ed42b1993
- Size 79KB
- SHA256 541593de78f03a5c0fe6aa5146148b320daa1582e1940d8f53530daa9d839a18
- MD5 a3c158be8374abd88fa2017ed42b1993
- SHA1 32a0e441efd32cfe7b052f4b39cec6bf7210ef0f
- SHA512 d3b15193f948d34bb6b7560e0fb51a228354bb3bf0c2b12836ebe38ac0e9f93968acff79d23d540c34f64c2ec241a4211a6e78613d4412362cfbff4f2eab22be
- SSDEEP 1536:BUukjxiLjb9Atk31fd7UiBrqYYZ3Nz+2SN+n1cswwiCT3ZbR2OLaztWf31ns:ByjxiBAtuZjp/YNNz+2SN+n19di83ZbY
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Modifies file permissions