Overview

overview

10

Static

static

10

841594fe3e...ec.jar

windows7-x64

1

841594fe3e...ec.jar

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    841594fe3e8400fc4162f73b0b1393c4903d0225f25c73277ba2ec442b8095ec.jar

  • Size

    209KB

  • Sample

    240305-czay8acb3w

  • MD5

    70c7e80f047ed2162aff41a46b770dd8

  • SHA1

    6d02a11dba0bb998c5581bb4bec3ab2dcd02c646

  • SHA256

    841594fe3e8400fc4162f73b0b1393c4903d0225f25c73277ba2ec442b8095ec

  • SHA512

    6b875f1e6afeb46b413fef3fe34625b6e2ba83b2b9043a53eeeac53aa0694362a59b281e7b14bb3ab0630b199d208d56e1c9016d6f9e8e081d8ed5ff69c3c165

  • SSDEEP

    6144:S8A8lJAHv//RZfeEzydRZ4V9DCHJuPPCVmyKx:S8plSHzWEi29DCH6mKx

Score
10/10
strratdiscovery

Malware Config

Extracted

Family

strrat

C2

tzitziklishop3.ddns.net:7800

103.114.104.158:7800
Attributes
  • license_id

    DB1U-CVGT-7HUG-X0A0-GNWH

  • plugins_url

    http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5

  • scheduled_task

    true

  • secondary_startup

    true

  • startup

    true

Targets

    • Target

      841594fe3e8400fc4162f73b0b1393c4903d0225f25c73277ba2ec442b8095ec.jar

    • Size

      209KB

    • MD5

      70c7e80f047ed2162aff41a46b770dd8

    • SHA1

      6d02a11dba0bb998c5581bb4bec3ab2dcd02c646

    • SHA256

      841594fe3e8400fc4162f73b0b1393c4903d0225f25c73277ba2ec442b8095ec

    • SHA512

      6b875f1e6afeb46b413fef3fe34625b6e2ba83b2b9043a53eeeac53aa0694362a59b281e7b14bb3ab0630b199d208d56e1c9016d6f9e8e081d8ed5ff69c3c165

    • SSDEEP

      6144:S8A8lJAHv//RZfeEzydRZ4V9DCHJuPPCVmyKx:S8plSHzWEi29DCH6mKx

    Score
    7/10
    discovery
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks