Overview

overview

10

Static

static

10

63c6996a03...59.jar

windows7-x64

1

63c6996a03...59.jar

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    63c6996a03acda7db008bf6d1522b06efdff5fcdf7103b31767ebd47cee72a59.jar

  • Size

    209KB

  • Sample

    240303-fwttpsdd8y

  • MD5

    2d5d4212065ca4cd30b1db90d381a709

  • SHA1

    932d1a564bcbf46488d9797c8bfe4463390d0799

  • SHA256

    63c6996a03acda7db008bf6d1522b06efdff5fcdf7103b31767ebd47cee72a59

  • SHA512

    e8e39bbdf062a6097e99752c845ef8ccbe705bce5251c5a68905cfcfcf6139e722cacaaaab733a82b54323b651e5edff07cfff65b3103175f938dceb39cedc37

  • SSDEEP

    6144:+Io8hJ0H//T5pbC8zylRdUVR36TduPPGVmyKb:+IxhuXnm8WGR36Ti6Kb

Score
10/10
strratdiscovery

Malware Config

Extracted

Family

strrat

C2

tzitziklishop3.ddns.net:7800

103.114.104.158:7800
Attributes
  • license_id

    DB1U-CVGT-7HUG-X0A0-GNWH

  • plugins_url

    http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5

  • scheduled_task

    true

  • secondary_startup

    true

  • startup

    true

Targets

    • Target

      63c6996a03acda7db008bf6d1522b06efdff5fcdf7103b31767ebd47cee72a59.jar

    • Size

      209KB

    • MD5

      2d5d4212065ca4cd30b1db90d381a709

    • SHA1

      932d1a564bcbf46488d9797c8bfe4463390d0799

    • SHA256

      63c6996a03acda7db008bf6d1522b06efdff5fcdf7103b31767ebd47cee72a59

    • SHA512

      e8e39bbdf062a6097e99752c845ef8ccbe705bce5251c5a68905cfcfcf6139e722cacaaaab733a82b54323b651e5edff07cfff65b3103175f938dceb39cedc37

    • SSDEEP

      6144:+Io8hJ0H//T5pbC8zylRdUVR36TduPPGVmyKb:+IxhuXnm8WGR36Ti6Kb

    Score
    7/10
    discovery
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks