Overview

overview

10

Static

static

1

27f117c2cd...2c.jar

windows7-x64

1

27f117c2cd...2c.jar

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    27f117c2cdae0c702f1095bb7c6fe40d7efb18e4ac14d3eca5570ce1d24bac2c.jar

  • Size

    558KB

  • Sample

    240523-blz6hsga9x

  • MD5

    cbc196fe2d418f1e6ad46cc906a1f6fa

  • SHA1

    cd0b7f45e2f5077b567f26b8bb0d553d6e605311

  • SHA256

    27f117c2cdae0c702f1095bb7c6fe40d7efb18e4ac14d3eca5570ce1d24bac2c

  • SHA512

    94694d8e7993696c9f871c027b072d4788130cfd6f9155a0fa451840bedbd6d70e544f0e567c6f5f4899b7a5f37c032decdbb8c29fe432709fdf6c7e5887a6ae

  • SSDEEP

    6144:FsoiTHc0JQc7jot+Tn3leT9OMiYNf2M57Qu1LJ5NIn4knrWIMXYMXs+72EE/20y/:FsogJItaeR/NucMu11INrWlX2/nyz+5w

Score
10/10
strratdiscoverypersistencestealertrojan

Malware Config

Targets

    • Target

      27f117c2cdae0c702f1095bb7c6fe40d7efb18e4ac14d3eca5570ce1d24bac2c.jar

    • Size

      558KB

    • MD5

      cbc196fe2d418f1e6ad46cc906a1f6fa

    • SHA1

      cd0b7f45e2f5077b567f26b8bb0d553d6e605311

    • SHA256

      27f117c2cdae0c702f1095bb7c6fe40d7efb18e4ac14d3eca5570ce1d24bac2c

    • SHA512

      94694d8e7993696c9f871c027b072d4788130cfd6f9155a0fa451840bedbd6d70e544f0e567c6f5f4899b7a5f37c032decdbb8c29fe432709fdf6c7e5887a6ae

    • SSDEEP

      6144:FsoiTHc0JQc7jot+Tn3leT9OMiYNf2M57Qu1LJ5NIn4knrWIMXYMXs+72EE/20y/:FsogJItaeR/NucMu11INrWlX2/nyz+5w

    Score
    10/10
    strratdiscoverypersistencestealertrojan

    • STRRAT

      STRRAT is a remote access tool than can steal credentials and log keystrokes.

      trojanstealerstrrat

    • Drops startup file

    • Loads dropped DLL

    • Modifies file permissions

      discovery

    • Adds Run key to start application

      persistence

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks