Overview

overview

10

Static

static

10

841594fe3e...ec.jar

ubuntu-18.04-amd64

841594fe3e...ec.jar

debian-9-armhf

841594fe3e...ec.jar

debian-9-mips

841594fe3e...ec.jar

debian-9-mipsel

Sharing

Copy URL Twitter E-mail

General

  • Target
    841594fe3e8400fc4162f73b0b1393c4903d0225f25c73277ba2ec442b8095ec.zip
  • Size 202KB
  • Sample240307-lgaeeagc44
  • SHA256 bbd90ab2bdfd5e54ba287949b967a8535d677b2a450fb7c529147fede1352cc9
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
strrat

Malware Config

Extracted

Family

  • strrat

C2

  • tzitziklishop3.ddns.net:7800

  • 103.114.104.158:7800

Attributes
  • license_id

    DB1U-CVGT-7HUG-X0A0-GNWH

  • plugins_url

    http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5

  • scheduled_task

    true

  • secondary_startup

    true

  • startup

    true

Signatures

File Explorer

  • 841594fe3e8400fc4162f73b0b1393c4903d0225f25c73277ba2ec442b8095ec.zip
    .zip 202KB
  • 841594fe3e8400fc4162f73b0b1393c4903d0225f25c73277ba2ec442b8095ec.jar
    .jar 209KB

841594fe3e8400fc4162f73b0b1393c4903d0225f25c73277ba2ec442b8095ec.zip

  • SHA256 bbd90ab2bdfd5e54ba287949b967a8535d677b2a450fb7c529147fede1352cc9
  • MD5 SHA1 SHA512 SSDEEP
Password
infected