Overview

overview

10

Static

static

10

401k-state...DF.jar

windows7-x64

1

401k-state...DF.jar

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    acc900c72b0485c9a53bee4b4fc007c7

  • Size

    90KB

  • Sample

    240228-za2f7sda6x

  • MD5

    acc900c72b0485c9a53bee4b4fc007c7

  • SHA1

    030468a4486ff2d9c20c1612877a6b8ee9f1d83e

  • SHA256

    ec78dc52818e3f0ba1b0c8504fc199c5b0c17e5bd82b853e21dbd9dffe7d5266

  • SHA512

    2e6e889e5aa4068afd90dd4d4e59163beadfaad10b4983bea2d09a781c2aa36c9d0c785ad59f2aec38809e469d4d0bb2e0fe41bb7a023798beaca7fbc74ad5d3

  • SSDEEP

    1536:J/aRcW0U2l2jDbzQiBBcBh0+2F8NLkkzCUhl4O/GQTxVgJysG2vwHhlguCKo1rdJ:AcJUpDrBBcHNKwLNBuQTfg4snIJCKo17

Score
10/10
strratdiscovery

Malware Config

Extracted

Family

strrat

C2

193.142.146.203:1981

ffv32223.ru:1980
Attributes
  • license_id

    AERU-ENCS-ONT9-41T2-97OJ

  • plugins_url

    http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5

  • scheduled_task

    true

  • secondary_startup

    true

  • startup

    true

Targets

    • Target

      401k-statement.PDF.jar

    • Size

      96KB

    • MD5

      00c6403b831a9a510743b7cb1f3edc62

    • SHA1

      83cb65673aa680082875b7795d71a3923142adeb

    • SHA256

      269ad9c64667ee8349c77e0917b256ec7b16cd256f02ba3fc7258b844a9742db

    • SHA512

      01fe9f7ac1faace5a77f2f1121c76ce1f762a8cc5a6f1e03c44b2ebf642558c42ce7cf9caffb229d73dac927460b124c34ec8fad9bf2078411ce451a5243e6f2

    • SSDEEP

      3072:g6XYBrmewh+tsLXyGZiv/JAlPu7HYnelp5BVHJ:g6QrmXXFIv/+YYeXLH

    Score
    7/10
    discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks