Overview

overview

10

Static

static

10

bd8b78b9bb...99.jar

windows7-x64

1

bd8b78b9bb...99.jar

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bd8b78b9bb8eddc7c4ffac6fe3a594a0abffddc7b41925d7130be3f931c23c99.jar

  • Size

    209KB

  • Sample

    240313-c5tcraag2v

  • MD5

    6e2c2d71a015ad6d5993026d24062e9f

  • SHA1

    8df1692a8ad300e312b2ed886765c1aecf75b335

  • SHA256

    bd8b78b9bb8eddc7c4ffac6fe3a594a0abffddc7b41925d7130be3f931c23c99

  • SHA512

    23b304b378dd8c65e21b2f427a24cbf49c5e3da38c091c9beb3c52e7d32f582dfa58a25114109d6a8bfb09a62ebfeb3d6ef335776487182c5c61935d24745373

  • SSDEEP

    6144:s8q8FJ+HP/djZ5yQzyTRpUVjNq9ruFPwVmyK/:s8jFAnzkQEKjNq9OgK/

Score
10/10
strratdiscovery

Malware Config

Extracted

Family

strrat

C2

tzitziklishop3.ddns.net:7800

103.151.123.225:7800
Attributes
  • license_id

    DB1U-CVGT-7HUG-X0A0-GNWH

  • plugins_url

    http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5

  • scheduled_task

    true

  • secondary_startup

    true

  • startup

    true

Targets

    • Target

      bd8b78b9bb8eddc7c4ffac6fe3a594a0abffddc7b41925d7130be3f931c23c99.jar

    • Size

      209KB

    • MD5

      6e2c2d71a015ad6d5993026d24062e9f

    • SHA1

      8df1692a8ad300e312b2ed886765c1aecf75b335

    • SHA256

      bd8b78b9bb8eddc7c4ffac6fe3a594a0abffddc7b41925d7130be3f931c23c99

    • SHA512

      23b304b378dd8c65e21b2f427a24cbf49c5e3da38c091c9beb3c52e7d32f582dfa58a25114109d6a8bfb09a62ebfeb3d6ef335776487182c5c61935d24745373

    • SSDEEP

      6144:s8q8FJ+HP/djZ5yQzyTRpUVjNq9ruFPwVmyK/:s8jFAnzkQEKjNq9OgK/

    Score
    7/10
    discovery
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks