Behavioral task
behavioral1
Sample
bd8b78b9bb8eddc7c4ffac6fe3a594a0abffddc7b41925d7130be3f931c23c99.jar
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bd8b78b9bb8eddc7c4ffac6fe3a594a0abffddc7b41925d7130be3f931c23c99.jar
Resource
win10v2004-20231215-en
General
-
Target
bd8b78b9bb8eddc7c4ffac6fe3a594a0abffddc7b41925d7130be3f931c23c99.jar
-
Size
209KB
-
MD5
6e2c2d71a015ad6d5993026d24062e9f
-
SHA1
8df1692a8ad300e312b2ed886765c1aecf75b335
-
SHA256
bd8b78b9bb8eddc7c4ffac6fe3a594a0abffddc7b41925d7130be3f931c23c99
-
SHA512
23b304b378dd8c65e21b2f427a24cbf49c5e3da38c091c9beb3c52e7d32f582dfa58a25114109d6a8bfb09a62ebfeb3d6ef335776487182c5c61935d24745373
-
SSDEEP
6144:s8q8FJ+HP/djZ5yQzyTRpUVjNq9ruFPwVmyK/:s8jFAnzkQEKjNq9OgK/
Malware Config
Extracted
strrat
tzitziklishop3.ddns.net:7800
103.151.123.225:7800
-
license_id
DB1U-CVGT-7HUG-X0A0-GNWH
-
plugins_url
http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5
-
scheduled_task
true
-
secondary_startup
true
-
startup
true
Signatures
-
Strrat family
Files
-
bd8b78b9bb8eddc7c4ffac6fe3a594a0abffddc7b41925d7130be3f931c23c99.jar.jar