Overview

overview

10

Static

static

10

PO#0015871.jar

windows7-x64

1

PO#0015871.jar

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    PO#0015871.jar

  • Size

    163KB

  • Sample

    240321-vqtzvacg84

  • MD5

    a22184b2e7c7673c4c37bc5c08c6f011

  • SHA1

    1af5a401e967998de2733bee4da5878bb0caf30d

  • SHA256

    f888b04e753216a6924c56efa705c71fd9682cb9b8f241d6cfc79fe3cdf62b20

  • SHA512

    4d28fdc16b86283a4d7ffb1b2dc943b632f12163aabbd69aa2af9d2bb14c914eaf50f08233a3f4d499e3cc3076a3679018e085b8201eb9ecc8c0742552a4a334

  • SSDEEP

    3072:5KqqJ8EPFDwH4E2A52puSdBGb//BtrbMg+Og5yG8C65F9y/9E2MGDBv:54nJww0QuSzuXBtrgieeDElVND5

Score
10/10
strratdiscovery

Malware Config

Extracted

Family

strrat

C2

192.169.6.153:8182

Attributes
  • license_id

    J0H5-XGZW-QBV0-YKMW-ZAQJ

  • plugins_url

    http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5

  • scheduled_task

    true

  • secondary_startup

    true

  • startup

    true

Targets

    • Target

      PO#0015871.jar

    • Size

      163KB

    • MD5

      a22184b2e7c7673c4c37bc5c08c6f011

    • SHA1

      1af5a401e967998de2733bee4da5878bb0caf30d

    • SHA256

      f888b04e753216a6924c56efa705c71fd9682cb9b8f241d6cfc79fe3cdf62b20

    • SHA512

      4d28fdc16b86283a4d7ffb1b2dc943b632f12163aabbd69aa2af9d2bb14c914eaf50f08233a3f4d499e3cc3076a3679018e085b8201eb9ecc8c0742552a4a334

    • SSDEEP

      3072:5KqqJ8EPFDwH4E2A52puSdBGb//BtrbMg+Og5yG8C65F9y/9E2MGDBv:54nJww0QuSzuXBtrgieeDElVND5

    Score
    7/10
    discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks