Behavioral task
behavioral1
Sample
CTIKUL SOA.jar
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
CTIKUL SOA.jar
Resource
win10v2004-20240226-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
CTIKUL SOA.jar
-
Size
182KB
-
MD5
e811acc241956da28397cfc904a208f8
-
SHA1
53ae77b97e46e1c0ead31f9441bb93ff0b365750
-
SHA256
f153105a307e9bc3457b4203f1920a1cef9ac4e14bb1e460d24685b78781e1d7
-
SHA512
f0234c99c07523f9cc85574e387523696dd3d299dbdb83c4e975ead7af2b36452283392945168cb12da763e8ec2c95e9c2e205a9bfd4b74b8de52d1f97e1e4e3
-
SSDEEP
3072:AI4ZqwQ46LT9iV0R9STkczeU6HaZIhUSnFj5dKEem6noUxspzBVp:FjwUP0V0R9rRLF9+7oUxSl7
Score
10/10
Malware Config
Extracted
Family
strrat
C2
93.123.39.147:8088
Attributes
-
license_id
O1D2-3RSR-H341-QFWS-2MFD
-
plugins_url
http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5
-
scheduled_task
true
-
secondary_startup
true
-
startup
true
Signatures
-
Strrat family
Files
-
CTIKUL SOA.jar.jar