Overview

overview

10

Static

static

10

db1bef65b9...18.jar

windows7-x64

1

db1bef65b9...18.jar

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    db1bef65b9867b4a989e9de2e262c9fc_JaffaCakes118

  • Size

    184KB

  • Sample

    240405-wsn22saf9s

  • MD5

    db1bef65b9867b4a989e9de2e262c9fc

  • SHA1

    cdd973b71cfb68aa2427e5dde40d7976ecb592da

  • SHA256

    4160cea7518f139f03429f5ad028f2293e22248ada49775d85e72aad5dc49b14

  • SHA512

    e9f161869fa7dbd3509dec30c2405a274690041c1259e728ada569b5cd3af7f9a4fbd5986315805e0e463d8d4cfaa6c637c27055c24cafdd0db963a3a4e316f6

  • SSDEEP

    3072:s4wuPS1MZGzneCV5422gPn2OddMfDcgRYcp/uqZXxbCG6dLlUxKELs:s7uPiMZGTeQ7/PnDdeDcgRxAqDHDKE4

Score
10/10
strratdiscovery

Malware Config

Extracted

Family

strrat

C2

31.210.20.164:4292

127.0.0.1:4292
Attributes
  • license_id

    61DP-MVTK-7F5S-QIGT-AV1H

  • plugins_url

    http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5

  • scheduled_task

    true

  • secondary_startup

    true

  • startup

    true

Targets

    • Target

      db1bef65b9867b4a989e9de2e262c9fc_JaffaCakes118

    • Size

      184KB

    • MD5

      db1bef65b9867b4a989e9de2e262c9fc

    • SHA1

      cdd973b71cfb68aa2427e5dde40d7976ecb592da

    • SHA256

      4160cea7518f139f03429f5ad028f2293e22248ada49775d85e72aad5dc49b14

    • SHA512

      e9f161869fa7dbd3509dec30c2405a274690041c1259e728ada569b5cd3af7f9a4fbd5986315805e0e463d8d4cfaa6c637c27055c24cafdd0db963a3a4e316f6

    • SSDEEP

      3072:s4wuPS1MZGzneCV5422gPn2OddMfDcgRYcp/uqZXxbCG6dLlUxKELs:s7uPiMZGTeQ7/PnDdeDcgRxAqDHDKE4

    Score
    7/10
    discovery
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks