Behavioral task
behavioral1
Sample
swift copy.jar
Resource
win7-20240221-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
swift copy.jar
Resource
win10v2004-20240226-en
3 signatures
150 seconds
General
-
Target
swift copy.jar
-
Size
182KB
-
MD5
f8121ad15a5e9951490c23860585d3e2
-
SHA1
1e9c3d47a320448ef1061e11e3cae1b493bf9d83
-
SHA256
e7674068583ee9a44a19fbbf9f08281b53cb2b8a1533552421ea74f5829e5efd
-
SHA512
2ad3c451360a295702c94d316dbc9b402b73b946c024180e676daeb061caf1751dcc28a012e1907a4f733054121460ee193e6307f66db80de8d6aa41886cd4f5
-
SSDEEP
3072:UeQPYwQe6BFfMX2b9SvCe9eo6HaZyhkS9Xj5HgmematQuxsxztXp:/3wO70X2b99rZX9crmuxSR5
Score
10/10
Malware Config
Extracted
Family
strrat
C2
93.123.39.147:8088
Attributes
-
license_id
O1D2-3RSR-H341-QFWS-2MFD
-
plugins_url
http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5
-
scheduled_task
true
-
secondary_startup
true
-
startup
true
Signatures
-
Strrat family
Files
-
swift copy.jar.jar