Overview

overview

10

Static

static

10

swift copy.jar

windows7-x64

1

swift copy.jar

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    swift copy.jar

  • Size

    182KB

  • Sample

    240321-s3aqmaef72

  • MD5

    f8121ad15a5e9951490c23860585d3e2

  • SHA1

    1e9c3d47a320448ef1061e11e3cae1b493bf9d83

  • SHA256

    e7674068583ee9a44a19fbbf9f08281b53cb2b8a1533552421ea74f5829e5efd

  • SHA512

    2ad3c451360a295702c94d316dbc9b402b73b946c024180e676daeb061caf1751dcc28a012e1907a4f733054121460ee193e6307f66db80de8d6aa41886cd4f5

  • SSDEEP

    3072:UeQPYwQe6BFfMX2b9SvCe9eo6HaZyhkS9Xj5HgmematQuxsxztXp:/3wO70X2b99rZX9crmuxSR5

Score
10/10
strratdiscovery

Malware Config

Extracted

Family

strrat

C2

93.123.39.147:8088

Attributes
  • license_id

    O1D2-3RSR-H341-QFWS-2MFD

  • plugins_url

    http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5

  • scheduled_task

    true

  • secondary_startup

    true

  • startup

    true

Targets

    • Target

      swift copy.jar

    • Size

      182KB

    • MD5

      f8121ad15a5e9951490c23860585d3e2

    • SHA1

      1e9c3d47a320448ef1061e11e3cae1b493bf9d83

    • SHA256

      e7674068583ee9a44a19fbbf9f08281b53cb2b8a1533552421ea74f5829e5efd

    • SHA512

      2ad3c451360a295702c94d316dbc9b402b73b946c024180e676daeb061caf1751dcc28a012e1907a4f733054121460ee193e6307f66db80de8d6aa41886cd4f5

    • SSDEEP

      3072:UeQPYwQe6BFfMX2b9SvCe9eo6HaZyhkS9Xj5HgmematQuxsxztXp:/3wO70X2b99rZX9crmuxSR5

    Score
    7/10
    discovery
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks