General

  • Target

    Attachment.jar

  • Size

    64KB

  • MD5

    77b5bec60e8ccde749c522ca55b62f4a

  • SHA1

    399089c4510de6e905190593426436c243f3e692

  • SHA256

    001b11a9ed658c8504c01726f9b5df3b04caf2ee095396de2e79712674e6dfe0

  • SHA512

    980841d212cb12409b7d59a5b7926918d7cf664ecc2a3808a35ceca5b4048ffbb807eb815d0a2035d39ce3043fcccbedd4473ec2d837f666a9a49222289c7e89

  • SSDEEP

    1536:EOVCTmOXlFWlOI7xaiv9WCCC6/YC9icqKBMeGCMQOulVOBXTB2yWv7lv:E2qpVFWx7EiYXeevMQOulVYTB2yWv79

Score
10/10

Malware Config

Extracted

Family

strrat

C2

elastsolek21.duckdns.org:4781

zekeriyasolek45.duckdns.org:4781

Attributes
  • license_id

    WFC9-W4KB-388F-9KY1-S6JV

  • plugins_url

    http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5

  • scheduled_task

    true

  • secondary_startup

    true

  • startup

    true

Signatures

Files

  • Attachment.jar
    .jar