General

  • Target

    e6f93fbf80cf48ca944fd053685061a3c512dcf83952fd440a0f882ebab76e9f.zip

  • Size

    171KB

  • MD5

    09ec32ed78593f4771eb485d97ef14eb

  • SHA1

    fccc0ccfd0872a9e38411a6cfb1d614ad442592e

  • SHA256

    e6f93fbf80cf48ca944fd053685061a3c512dcf83952fd440a0f882ebab76e9f

  • SHA512

    e14cf2f8ed7f569a4fed85ed7e2058ff681a42ba9c0321b459e93218ea2fda90e22e8ff743f9ce18a33b4ef70eb4b8b6a556ec74330ee418376dd3066c11d695

  • SSDEEP

    3072:yqfHZmyFAZhheBlFzzGY6zZSHj9WTs4B9S93KJ3F08M1syWu:yiyeNSY6zZk5FY6KJ9u

Score
10/10

Malware Config

Extracted

Family

strrat

C2

axe.ydns.eu:3232

jnchinacp.ydns.eu:147

Attributes
  • license_id

    JXYU-7CPT-BJRM-66GN-22SV

  • plugins_url

    http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5

  • scheduled_task

    true

  • secondary_startup

    true

  • startup

    true

Signatures

Files

  • e6f93fbf80cf48ca944fd053685061a3c512dcf83952fd440a0f882ebab76e9f.zip
    .jar