General
-
Target
db1bef65b9867b4a989e9de2e262c9fc_JaffaCakes118
-
Size
184KB
-
MD5
db1bef65b9867b4a989e9de2e262c9fc
-
SHA1
cdd973b71cfb68aa2427e5dde40d7976ecb592da
-
SHA256
4160cea7518f139f03429f5ad028f2293e22248ada49775d85e72aad5dc49b14
-
SHA512
e9f161869fa7dbd3509dec30c2405a274690041c1259e728ada569b5cd3af7f9a4fbd5986315805e0e463d8d4cfaa6c637c27055c24cafdd0db963a3a4e316f6
-
SSDEEP
3072:s4wuPS1MZGzneCV5422gPn2OddMfDcgRYcp/uqZXxbCG6dLlUxKELs:s7uPiMZGTeQ7/PnDdeDcgRxAqDHDKE4
Score
10/10
Malware Config
Extracted
Family
strrat
C2
31.210.20.164:4292
127.0.0.1:4292
Attributes
-
license_id
61DP-MVTK-7F5S-QIGT-AV1H
-
plugins_url
http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5
-
scheduled_task
true
-
secondary_startup
true
-
startup
true
Signatures
-
Strrat family
Files
-
db1bef65b9867b4a989e9de2e262c9fc_JaffaCakes118