General

  • Target
    c340008b05ff34748fbf0ff15c52faaa.bin
  • Size 202KB
  • Sample240304-ejadvshb9s
  • SHA256 7d1c70e850bc8b728d25f06292da6f1a92c3cadd780cc3ddbd09a86672b5bd4d
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • strrat

C2
  • tzitziklishop3.ddns.net:7800

  • 103.114.104.158:7800

Attributes
  • license_id

    DB1U-CVGT-7HUG-X0A0-GNWH

  • plugins_url

    http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5

  • scheduled_task

    true

  • secondary_startup

    true

  • startup

    true

Signatures

File Explorer

  • c340008b05ff34748fbf0ff15c52faaa.bin
    .zip 202KB
  • 7d1fed6f7a55e3208f33a3e084161f300403d1ad482ed4e04fca355c4807feec.jar
    .jar 209KB

c340008b05ff34748fbf0ff15c52faaa.bin

  • SHA256 7d1c70e850bc8b728d25f06292da6f1a92c3cadd780cc3ddbd09a86672b5bd4d
  • MD5 SHA1 SHA512 SSDEEP
Password
infected