General
-
Target
swift copy.jar
-
Size
182KB
-
Sample
240321-s3aqmaef72
-
MD5
f8121ad15a5e9951490c23860585d3e2
-
SHA1
1e9c3d47a320448ef1061e11e3cae1b493bf9d83
-
SHA256
e7674068583ee9a44a19fbbf9f08281b53cb2b8a1533552421ea74f5829e5efd
-
SHA512
2ad3c451360a295702c94d316dbc9b402b73b946c024180e676daeb061caf1751dcc28a012e1907a4f733054121460ee193e6307f66db80de8d6aa41886cd4f5
-
SSDEEP
3072:UeQPYwQe6BFfMX2b9SvCe9eo6HaZyhkS9Xj5HgmematQuxsxztXp:/3wO70X2b99rZX9crmuxSR5
Behavioral task
behavioral1
Sample
swift copy.jar
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
swift copy.jar
Resource
win10v2004-20240226-en
Malware Config
Extracted
strrat
93.123.39.147:8088
-
license_id
O1D2-3RSR-H341-QFWS-2MFD
-
plugins_url
http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5
-
scheduled_task
true
-
secondary_startup
true
-
startup
true
Targets
-
-
Target
swift copy.jar
-
Size
182KB
-
MD5
f8121ad15a5e9951490c23860585d3e2
-
SHA1
1e9c3d47a320448ef1061e11e3cae1b493bf9d83
-
SHA256
e7674068583ee9a44a19fbbf9f08281b53cb2b8a1533552421ea74f5829e5efd
-
SHA512
2ad3c451360a295702c94d316dbc9b402b73b946c024180e676daeb061caf1751dcc28a012e1907a4f733054121460ee193e6307f66db80de8d6aa41886cd4f5
-
SSDEEP
3072:UeQPYwQe6BFfMX2b9SvCe9eo6HaZyhkS9Xj5HgmematQuxsxztXp:/3wO70X2b99rZX9crmuxSR5
Score7/10-
Modifies file permissions
-