Behavioral task
behavioral1
Sample
New Order NO 4705008982 DTD.jar
Resource
win7-20240221-en
0 signatures
150 seconds
General
-
Target
New Order NO 4705008982 DTD.jar
-
Size
209KB
-
MD5
70c7e80f047ed2162aff41a46b770dd8
-
SHA1
6d02a11dba0bb998c5581bb4bec3ab2dcd02c646
-
SHA256
841594fe3e8400fc4162f73b0b1393c4903d0225f25c73277ba2ec442b8095ec
-
SHA512
6b875f1e6afeb46b413fef3fe34625b6e2ba83b2b9043a53eeeac53aa0694362a59b281e7b14bb3ab0630b199d208d56e1c9016d6f9e8e081d8ed5ff69c3c165
-
SSDEEP
6144:S8A8lJAHv//RZfeEzydRZ4V9DCHJuPPCVmyKx:S8plSHzWEi29DCH6mKx
Score
10/10
Malware Config
Extracted
Family
strrat
C2
tzitziklishop3.ddns.net:7800
103.114.104.158:7800
Attributes
-
license_id
DB1U-CVGT-7HUG-X0A0-GNWH
-
plugins_url
http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5
-
scheduled_task
true
-
secondary_startup
true
-
startup
true
Signatures
-
Strrat family
Files
-
New Order NO 4705008982 DTD.jar.jar