General

  • Target

    8a0139670ac058d3c3c4fe64ba762b39e692f0cff7cc752ae438396ecd2ab0df.jar

  • Size

    209KB

  • MD5

    bab2e737e8f87c387d069a4ae9af3a68

  • SHA1

    2e936d38afa51c8adf496a3c58e431d1ca5cbf3f

  • SHA256

    8a0139670ac058d3c3c4fe64ba762b39e692f0cff7cc752ae438396ecd2ab0df

  • SHA512

    75cc6ee4731c75b9d40c08588f3b3a23d06d04b409ecea976b3008ed0f785e52e50e82fceef5f918fa31bd2050da9f413666d3f224b1fd8425982aec6545d118

  • SSDEEP

    6144:7mF8ZJdHV/cwxa2UzyQRLaVIM0qOu2P7VmyKk:7mCZHFTlUfGIM0quBKk

Score
10/10

Malware Config

Extracted

Family

strrat

C2

tzitziklishop3.ddns.net:7800

103.151.123.225:7800

Attributes
  • license_id

    DB1U-CVGT-7HUG-X0A0-GNWH

  • plugins_url

    http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5

  • scheduled_task

    true

  • secondary_startup

    true

  • startup

    true

Signatures

Files

  • 8a0139670ac058d3c3c4fe64ba762b39e692f0cff7cc752ae438396ecd2ab0df.jar
    .jar