Overview

overview

10

Static

static

10

fe05fed36a...ab.jar

windows7-x64

1

fe05fed36a...ab.jar

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fe05fed36a2b6c2118716120f085ebc72a3baad8e3372942e57926731c8919ab.jar

  • Size

    126KB

  • Sample

    240227-ggprwahg36

  • MD5

    31ac77837bcf9eab9de823001a548afe

  • SHA1

    06925f6d41bf7d2a04989095feb9a641e069ae17

  • SHA256

    fe05fed36a2b6c2118716120f085ebc72a3baad8e3372942e57926731c8919ab

  • SHA512

    15d6cf4d1740302258dbf690b88dce0ba9fcf5d36f57244d688d5009952c182a8db71d0e10925f15d2c9ff2201057dcc910a4e2abc2400971b5c9f267f828f11

  • SSDEEP

    3072:bQskmZaPlSPkevgkUlMyr9VhMQknMaxDKLc5QHN8Qbf:7UdYvgj2iMMalBCNj7

Score
10/10
strratdiscovery

Malware Config

Extracted

Family

strrat

C2

chevronciti.dns05.com:7888

chevronciti.dns05.com:7881
Attributes
  • license_id

    khonsari

  • plugins_url

    http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5

  • scheduled_task

    true

  • secondary_startup

    true

  • startup

    true

Targets

    • Target

      fe05fed36a2b6c2118716120f085ebc72a3baad8e3372942e57926731c8919ab.jar

    • Size

      126KB

    • MD5

      31ac77837bcf9eab9de823001a548afe

    • SHA1

      06925f6d41bf7d2a04989095feb9a641e069ae17

    • SHA256

      fe05fed36a2b6c2118716120f085ebc72a3baad8e3372942e57926731c8919ab

    • SHA512

      15d6cf4d1740302258dbf690b88dce0ba9fcf5d36f57244d688d5009952c182a8db71d0e10925f15d2c9ff2201057dcc910a4e2abc2400971b5c9f267f828f11

    • SSDEEP

      3072:bQskmZaPlSPkevgkUlMyr9VhMQknMaxDKLc5QHN8Qbf:7UdYvgj2iMMalBCNj7

    Score
    7/10
    discovery
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks