General
-
Target
841594fe3e8400fc4162f73b0b1393c4903d0225f25c73277ba2ec442b8095ec.zip
-
Size
202KB
-
MD5
a362bb1095b9de71d8ef9b03359beccb
-
SHA1
f65f15c7c327b956f4352f6a3e7f3e250f325239
-
SHA256
bbd90ab2bdfd5e54ba287949b967a8535d677b2a450fb7c529147fede1352cc9
-
SHA512
442c621bd7b31a8ee56ce9e37e328719f304e94345df7eb55227ed48ee94394c659f31df64a7c426f10c9eb2b27273b649673b588de5d340767d00c700664c2c
-
SSDEEP
6144:AyFidmjNCWH567sNNmu7WV4ZJsypUondiiv:Ay0asWZ6ANPjZJrtp
Score
10/10
Malware Config
Extracted
Family
strrat
C2
tzitziklishop3.ddns.net:7800
103.114.104.158:7800
Attributes
-
license_id
DB1U-CVGT-7HUG-X0A0-GNWH
-
plugins_url
http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5
-
scheduled_task
true
-
secondary_startup
true
-
startup
true
Signatures
-
Strrat family
Files
-
841594fe3e8400fc4162f73b0b1393c4903d0225f25c73277ba2ec442b8095ec.zip
Password: infected
-
841594fe3e8400fc4162f73b0b1393c4903d0225f25c73277ba2ec442b8095ec.jar