General
-
Target
a3c158be8374abd88fa2017ed42b1993
-
Size
79KB
-
MD5
a3c158be8374abd88fa2017ed42b1993
-
SHA1
32a0e441efd32cfe7b052f4b39cec6bf7210ef0f
-
SHA256
541593de78f03a5c0fe6aa5146148b320daa1582e1940d8f53530daa9d839a18
-
SHA512
d3b15193f948d34bb6b7560e0fb51a228354bb3bf0c2b12836ebe38ac0e9f93968acff79d23d540c34f64c2ec241a4211a6e78613d4412362cfbff4f2eab22be
-
SSDEEP
1536:BUukjxiLjb9Atk31fd7UiBrqYYZ3Nz+2SN+n1cswwiCT3ZbR2OLaztWf31ns:ByjxiBAtuZjp/YNNz+2SN+n19di83ZbY
Score
10/10
Malware Config
Extracted
Family
strrat
C2
51.161.197.23:77
Attributes
-
license_id
Q700-KUYB-QL61-6VZM-ZMMN
-
plugins_url
http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5
-
scheduled_task
true
-
secondary_startup
true
-
startup
true
Signatures
-
Strrat family
Files
-
a3c158be8374abd88fa2017ed42b1993