General
-
Target
1dfd81ebae1060bb1437f7083e287a74cdc72c5f667b851b6956580d928d8691.jar
-
Size
66KB
-
Sample
240410-bmrwjaeg7s
-
MD5
693f550992179d007e13d68d24f54c2e
-
SHA1
794c4bd6c87f9edcd5f73e9d0f97c2879c2a53ec
-
SHA256
1dfd81ebae1060bb1437f7083e287a74cdc72c5f667b851b6956580d928d8691
-
SHA512
47da4d2415f8c16d46bdea769f7ab17164460c641b014a8741bab3a1f09b50a01edee418e8939f44f6e0f24fe518983ae1846ca01190ce13c63494cc9214297e
-
SSDEEP
1536:OQAvsUq9hJrNB5mtCnZ+N+UAzDCb6ixMvNOeN:OzvG3JrsUn66COimRN
Behavioral task
behavioral1
Sample
1dfd81ebae1060bb1437f7083e287a74cdc72c5f667b851b6956580d928d8691.jar
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1dfd81ebae1060bb1437f7083e287a74cdc72c5f667b851b6956580d928d8691.jar
Resource
win10v2004-20240226-en
Malware Config
Extracted
strrat
elastsolek21.duckdns.org:4781
zekeriyasolek45.duckdns.org:4781
-
license_id
WFC9-W4KB-388F-9KY1-S6JV
-
plugins_url
http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5
-
scheduled_task
true
-
secondary_startup
true
-
startup
true
Targets
-
-
Target
1dfd81ebae1060bb1437f7083e287a74cdc72c5f667b851b6956580d928d8691.jar
-
Size
66KB
-
MD5
693f550992179d007e13d68d24f54c2e
-
SHA1
794c4bd6c87f9edcd5f73e9d0f97c2879c2a53ec
-
SHA256
1dfd81ebae1060bb1437f7083e287a74cdc72c5f667b851b6956580d928d8691
-
SHA512
47da4d2415f8c16d46bdea769f7ab17164460c641b014a8741bab3a1f09b50a01edee418e8939f44f6e0f24fe518983ae1846ca01190ce13c63494cc9214297e
-
SSDEEP
1536:OQAvsUq9hJrNB5mtCnZ+N+UAzDCb6ixMvNOeN:OzvG3JrsUn66COimRN
Score7/10-
Modifies file permissions
-