Overview

overview

10

Static

static

10

Pambansang...24.jar

windows7-x64

1

Pambansang...24.jar

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Pambansang Bangko ng Pilipinas #04082024.jar

  • Size

    219KB

  • Sample

    240408-mw82ysaf9z

  • MD5

    9f402491a7fb92ad00f505b3a2bfa4f9

  • SHA1

    394d058b6d055aa71df8627bb4feba20a3f68ff0

  • SHA256

    94625739d121386b168f555b165c22e2504ab8033fea9abcee6d1ba88fe42ac1

  • SHA512

    c6cf17527af488c368693d84dd61ea62ce1790bb6d1746ae922d3038198f9808674fa340bb1213195b1cc45c64196bb5ff2de3997f32e697d8ca57fef5b5b009

  • SSDEEP

    3072:yWAsPgYGkRFWJkGchS4K0CxQmA98CjlrfigrSYyeoedGNQPKbMAo9FNesOEZL0mD:yEo4Rcvv4K0nmAWCjlGkXoed/n5Co5fr

Score
10/10
strratdiscovery

Malware Config

Extracted

Family

strrat

C2

twart.myfirewall.org:4414

Attributes
  • license_id

    CYS7-AXVX-CX3F-09JX-D5FO

  • plugins_url

    http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5

  • scheduled_task

    true

  • secondary_startup

    true

  • startup

    true

Targets

    • Target

      Pambansang Bangko ng Pilipinas #04082024.jar

    • Size

      219KB

    • MD5

      9f402491a7fb92ad00f505b3a2bfa4f9

    • SHA1

      394d058b6d055aa71df8627bb4feba20a3f68ff0

    • SHA256

      94625739d121386b168f555b165c22e2504ab8033fea9abcee6d1ba88fe42ac1

    • SHA512

      c6cf17527af488c368693d84dd61ea62ce1790bb6d1746ae922d3038198f9808674fa340bb1213195b1cc45c64196bb5ff2de3997f32e697d8ca57fef5b5b009

    • SSDEEP

      3072:yWAsPgYGkRFWJkGchS4K0CxQmA98CjlrfigrSYyeoedGNQPKbMAo9FNesOEZL0mD:yEo4Rcvv4K0nmAWCjlGkXoed/n5Co5fr

    Score
    7/10
    discovery
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks