General
- Target 8dd3b1a8146a6e777fa6b3e9f69071058aa73f756876c88f4c8e9be17e4a6483.jar
- Size 209KB
- Sample240301-fxrezade3t
- SHA256 8dd3b1a8146a6e777fa6b3e9f69071058aa73f756876c88f4c8e9be17e4a6483
- MD5 288df8ebedd13b531e74c5f9ce730b2c
- SHA1 5560f86aa3370b500a71837494da09ba7ba35516
- SHA512 d017ebfdff1765759a66006785ed51024ef14b615090368aaff2c92e4b2bfcdc25e41ee3f146eecb51b724b50b7e5ec6d10584cea427e1a34bf6a86ff293364d
- SSDEEP 6144:qEw8tJIH//nRBnmszyNRJAVdjifpuHPqVmyKd:qE5t6XbmsCudjifyeKd
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
8dd3b1a8146a6e777fa6b3e9f69071058aa73f756876c88f4c8e9be17e4a6483.jar
Resource
win7-20240215-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
8dd3b1a8146a6e777fa6b3e9f69071058aa73f756876c88f4c8e9be17e4a6483.jar
Resource
win10v2004-20240226-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
strrat
C2
-
tzitziklishop3.ddns.net:7800
-
103.114.104.158:7800
Attributes
-
license_id
DB1U-CVGT-7HUG-X0A0-GNWH
-
plugins_url
http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5
-
scheduled_task
true
-
secondary_startup
true
-
startup
true
Targets
-
- Target 8dd3b1a8146a6e777fa6b3e9f69071058aa73f756876c88f4c8e9be17e4a6483.jar
- Size 209KB
- SHA256 8dd3b1a8146a6e777fa6b3e9f69071058aa73f756876c88f4c8e9be17e4a6483
- MD5 288df8ebedd13b531e74c5f9ce730b2c
- SHA1 5560f86aa3370b500a71837494da09ba7ba35516
- SHA512 d017ebfdff1765759a66006785ed51024ef14b615090368aaff2c92e4b2bfcdc25e41ee3f146eecb51b724b50b7e5ec6d10584cea427e1a34bf6a86ff293364d
- SSDEEP 6144:qEw8tJIH//nRBnmszyNRJAVdjifpuHPqVmyKd:qE5t6XbmsCudjifyeKd
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Modifies file permissions