Overview

overview

10

Static

static

10

841594fe3e...ec.jar

ubuntu-18.04-amd64

841594fe3e...ec.jar

debian-9-armhf

841594fe3e...ec.jar

debian-9-mips

841594fe3e...ec.jar

debian-9-mipsel

Sharing

Copy URL
Twitter E-mail

General

  • Target

    841594fe3e8400fc4162f73b0b1393c4903d0225f25c73277ba2ec442b8095ec.zip

  • Size

    202KB

  • Sample

    240307-lgaeeagc44

  • MD5

    a362bb1095b9de71d8ef9b03359beccb

  • SHA1

    f65f15c7c327b956f4352f6a3e7f3e250f325239

  • SHA256

    bbd90ab2bdfd5e54ba287949b967a8535d677b2a450fb7c529147fede1352cc9

  • SHA512

    442c621bd7b31a8ee56ce9e37e328719f304e94345df7eb55227ed48ee94394c659f31df64a7c426f10c9eb2b27273b649673b588de5d340767d00c700664c2c

  • SSDEEP

    6144:AyFidmjNCWH567sNNmu7WV4ZJsypUondiiv:Ay0asWZ6ANPjZJrtp

Score
10/10
strratlinux

Malware Config

Extracted

Family

strrat

C2

tzitziklishop3.ddns.net:7800

103.114.104.158:7800
Attributes
  • license_id

    DB1U-CVGT-7HUG-X0A0-GNWH

  • plugins_url

    http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5

  • scheduled_task

    true

  • secondary_startup

    true

  • startup

    true

Targets

    • Target

      841594fe3e8400fc4162f73b0b1393c4903d0225f25c73277ba2ec442b8095ec.jar

    • Size

      209KB

    • MD5

      70c7e80f047ed2162aff41a46b770dd8

    • SHA1

      6d02a11dba0bb998c5581bb4bec3ab2dcd02c646

    • SHA256

      841594fe3e8400fc4162f73b0b1393c4903d0225f25c73277ba2ec442b8095ec

    • SHA512

      6b875f1e6afeb46b413fef3fe34625b6e2ba83b2b9043a53eeeac53aa0694362a59b281e7b14bb3ab0630b199d208d56e1c9016d6f9e8e081d8ed5ff69c3c165

    • SSDEEP

      6144:S8A8lJAHv//RZfeEzydRZ4V9DCHJuPPCVmyKx:S8plSHzWEi29DCH6mKx

    Score
    1/10
    behavioral1behavioral2behavioral3behavioral4

MITRE ATT&CK Matrix

Tasks