General
-
Target
dd5d61f70b735816be30a3199d6f2b7e
-
Size
107KB
-
Sample
240325-gbpvpacb6s
-
MD5
dd5d61f70b735816be30a3199d6f2b7e
-
SHA1
69b2e1cb754fe4f60de05cf2059541976bfaa30f
-
SHA256
8734bd806a05fa2c9eb1deb90f8997ccd36a43c50e25ad5f3182a27d218de8ca
-
SHA512
f4c9d1440538a5e4eb4718217662413d414936732b500ab8b2f201117fa8b0c34e3f6a80815d221c0ac3840b54688b1b3c0d9081daf277aeb40b5c073b12c714
-
SSDEEP
3072:9YJFK8whNIAnBJ74se6TRX2JPtsYHqwmQX2:erKhxnBJMs1TuPFPX2
Behavioral task
behavioral1
Sample
dd5d61f70b735816be30a3199d6f2b7e.jar
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
dd5d61f70b735816be30a3199d6f2b7e.jar
Resource
win10v2004-20240226-en
Malware Config
Extracted
strrat
103.156.90.52:4292
127.0.0.1:4292
-
license_id
61DP-MVTK-7F5S-QIGT-AV1H
-
plugins_url
http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5
-
scheduled_task
true
-
secondary_startup
true
-
startup
true
Targets
-
-
Target
dd5d61f70b735816be30a3199d6f2b7e
-
Size
107KB
-
MD5
dd5d61f70b735816be30a3199d6f2b7e
-
SHA1
69b2e1cb754fe4f60de05cf2059541976bfaa30f
-
SHA256
8734bd806a05fa2c9eb1deb90f8997ccd36a43c50e25ad5f3182a27d218de8ca
-
SHA512
f4c9d1440538a5e4eb4718217662413d414936732b500ab8b2f201117fa8b0c34e3f6a80815d221c0ac3840b54688b1b3c0d9081daf277aeb40b5c073b12c714
-
SSDEEP
3072:9YJFK8whNIAnBJ74se6TRX2JPtsYHqwmQX2:erKhxnBJMs1TuPFPX2
Score7/10-
Modifies file permissions
-