General

  • Target

    c340008b05ff34748fbf0ff15c52faaa.bin

  • Size

    202KB

  • MD5

    313799f6b80863e77551e4d52b732b8f

  • SHA1

    f704e147786b309cdf32a0b83cb671c4b96bfd68

  • SHA256

    7d1c70e850bc8b728d25f06292da6f1a92c3cadd780cc3ddbd09a86672b5bd4d

  • SHA512

    84c72a46e5266587d70044ce5372d1c4b27960b4c5971b55b9f7ece27b960e0188b5cfe0075d84600e43da75b1fff815618bc069201fbf98a6eec0005de601fe

  • SSDEEP

    6144:5gDioJw3n3pZWPYJCkTBzq0oqiQb3eLXgH8hUzFW:mDpAnHJCkTRq0oqRDeLXgH8Oz8

Score
10/10

Malware Config

Extracted

Family

strrat

C2

tzitziklishop3.ddns.net:7800

103.114.104.158:7800

Attributes
  • license_id

    DB1U-CVGT-7HUG-X0A0-GNWH

  • plugins_url

    http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5

  • scheduled_task

    true

  • secondary_startup

    true

  • startup

    true

Signatures

Files

  • c340008b05ff34748fbf0ff15c52faaa.bin
    .zip

    Password: infected

  • 7d1fed6f7a55e3208f33a3e084161f300403d1ad482ed4e04fca355c4807feec.jar
    .jar