General

  • Target

    94625739d121386b168f555b165c22e2504ab8033fea9abcee6d1ba88fe42ac1.jar

  • Size

    219KB

  • MD5

    9f402491a7fb92ad00f505b3a2bfa4f9

  • SHA1

    394d058b6d055aa71df8627bb4feba20a3f68ff0

  • SHA256

    94625739d121386b168f555b165c22e2504ab8033fea9abcee6d1ba88fe42ac1

  • SHA512

    c6cf17527af488c368693d84dd61ea62ce1790bb6d1746ae922d3038198f9808674fa340bb1213195b1cc45c64196bb5ff2de3997f32e697d8ca57fef5b5b009

  • SSDEEP

    3072:yWAsPgYGkRFWJkGchS4K0CxQmA98CjlrfigrSYyeoedGNQPKbMAo9FNesOEZL0mD:yEo4Rcvv4K0nmAWCjlGkXoed/n5Co5fr

Score
10/10

Malware Config

Extracted

Family

strrat

C2

twart.myfirewall.org:4414

Attributes
  • license_id

    CYS7-AXVX-CX3F-09JX-D5FO

  • plugins_url

    http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5

  • scheduled_task

    true

  • secondary_startup

    true

  • startup

    true

Signatures

Files

  • 94625739d121386b168f555b165c22e2504ab8033fea9abcee6d1ba88fe42ac1.jar
    .jar