Behavioral task
behavioral1
Sample
7d1fed6f7a55e3208f33a3e084161f300403d1ad482ed4e04fca355c4807feec.jar
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7d1fed6f7a55e3208f33a3e084161f300403d1ad482ed4e04fca355c4807feec.jar
Resource
win10v2004-20240226-en
General
-
Target
c340008b05ff34748fbf0ff15c52faaa.bin
-
Size
202KB
-
MD5
313799f6b80863e77551e4d52b732b8f
-
SHA1
f704e147786b309cdf32a0b83cb671c4b96bfd68
-
SHA256
7d1c70e850bc8b728d25f06292da6f1a92c3cadd780cc3ddbd09a86672b5bd4d
-
SHA512
84c72a46e5266587d70044ce5372d1c4b27960b4c5971b55b9f7ece27b960e0188b5cfe0075d84600e43da75b1fff815618bc069201fbf98a6eec0005de601fe
-
SSDEEP
6144:5gDioJw3n3pZWPYJCkTBzq0oqiQb3eLXgH8hUzFW:mDpAnHJCkTRq0oqRDeLXgH8Oz8
Malware Config
Extracted
strrat
tzitziklishop3.ddns.net:7800
103.114.104.158:7800
-
license_id
DB1U-CVGT-7HUG-X0A0-GNWH
-
plugins_url
http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5
-
scheduled_task
true
-
secondary_startup
true
-
startup
true
Signatures
-
Strrat family
Files
-
c340008b05ff34748fbf0ff15c52faaa.bin.zip
Password: infected
-
7d1fed6f7a55e3208f33a3e084161f300403d1ad482ed4e04fca355c4807feec.jar.jar