General
-
Target
b962bbefda047a3fb192d13036d1f645_JaffaCakes118
-
Size
184KB
-
Sample
240404-qk7xashe69
-
MD5
b962bbefda047a3fb192d13036d1f645
-
SHA1
b1862abfd3b6627908745d7266e7193dd7f7d2bf
-
SHA256
f1485ebcdd60f6e7832578f71bf23f7f366c669f04f4906f439d85e7aadf4b8a
-
SHA512
4ed14d39795a32cf8319d839b57c2d3303b8fef2a89607bbe8eaf693a2bf38c5d70110b3013c2d01846628bb2a43b9b2217c55d7d6909254d442cde3e3fe1233
-
SSDEEP
3072:mPZMhgvT/mSrxxVMjmun9wvrp2PtjXZ5VbwZcOwyVKBAhGEEfMmTgB3vQ4:mB9vTeOxqNSQPtjXZ5VbyTHXhuTa/l
Behavioral task
behavioral1
Sample
b962bbefda047a3fb192d13036d1f645_JaffaCakes118.jar
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b962bbefda047a3fb192d13036d1f645_JaffaCakes118.jar
Resource
win10v2004-20240226-en
Malware Config
Extracted
strrat
31.210.20.164:4292
127.0.0.1:4292
-
license_id
61DP-MVTK-7F5S-QIGT-AV1H
-
plugins_url
http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5
-
scheduled_task
true
-
secondary_startup
true
-
startup
true
Targets
-
-
Target
b962bbefda047a3fb192d13036d1f645_JaffaCakes118
-
Size
184KB
-
MD5
b962bbefda047a3fb192d13036d1f645
-
SHA1
b1862abfd3b6627908745d7266e7193dd7f7d2bf
-
SHA256
f1485ebcdd60f6e7832578f71bf23f7f366c669f04f4906f439d85e7aadf4b8a
-
SHA512
4ed14d39795a32cf8319d839b57c2d3303b8fef2a89607bbe8eaf693a2bf38c5d70110b3013c2d01846628bb2a43b9b2217c55d7d6909254d442cde3e3fe1233
-
SSDEEP
3072:mPZMhgvT/mSrxxVMjmun9wvrp2PtjXZ5VbwZcOwyVKBAhGEEfMmTgB3vQ4:mB9vTeOxqNSQPtjXZ5VbyTHXhuTa/l
Score7/10-
Modifies file permissions
-