Overview

overview

10

Static

static

10

39694a3902...7d.jar

windows7-x64

10

39694a3902...7d.jar

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5d16505a5abfcfc99095a676f1f0bd64.bin

  • Size

    61KB

  • MD5

    0408be20ec0df4a20b7ba14ea0607baf

  • SHA1

    9ec71dcda42de083e2546a04b3f31ea3c8483755

  • SHA256

    60650436e7d4ec95b6149e3c30b9844b132be659852bb38b7e99b21ef7829ce0

  • SHA512

    1aefde1b2236c08c16ec94764f74a9f89fbf74a2e95dc4c7c03795c6f382a1387b5474e71e6cca86a0568e5eeb920ac6b4db3c5b816ab11c2bd03dda1e068791

  • SSDEEP

    1536:Tmz3b1BnwV8cTT/x+ASsFpUEEdYH28kV9eZhUky7ID8XIe:TmH1BwDT/xfBCY49Ih9z0Ie

Score
10/10
strrat

Malware Config

Extracted

Family

strrat

C2

elastsolek21.duckdns.org:4781

zekeriyasolek45.duckdns.org:4781
Attributes
  • license_id

    WFC9-W4KB-388F-9KY1-S6JV

  • plugins_url

    http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5

  • scheduled_task

    true

  • secondary_startup

    true

  • startup

    true

Signatures

Files

  • 5d16505a5abfcfc99095a676f1f0bd64.bin
    .zip

    Password: infected

  • 39694a390267d62c814460cb461426a78d3d43a701f5877896c8cbec48c7827d.jar
    .jar