Overview

overview

10

Static

static

1

cae1d06781...41.jar

windows7-x64

1

cae1d06781...41.jar

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cae1d06781f000cf396269e2b734d841192b2b09e7e1e9170b721ac77b70e741.zip

  • Size

    481KB

  • Sample

    240607-j4exasdb2x

  • MD5

    cf853ba5808b795bed3b7fc2ba55274f

  • SHA1

    d669abbff493925068e637b999cb28cfbc2181a0

  • SHA256

    cae1d06781f000cf396269e2b734d841192b2b09e7e1e9170b721ac77b70e741

  • SHA512

    33e621a67af9d89580e71e995024bb9b37a7b8c0e0d305c3cc46f957613599d8f85771655767bc97559f1330ba45e4fb6570fb49502627cb14e19955025a0771

  • SSDEEP

    12288:OhlGrKeQSPEIBrX01FURb5hvdCqBFkMNi29Kc4:OrGrlzL0M9QEi2Y

Score
10/10
strratdiscoverypersistencestealertrojan

Malware Config

Targets

    • Target

      cae1d06781f000cf396269e2b734d841192b2b09e7e1e9170b721ac77b70e741.zip

    • Size

      481KB

    • MD5

      cf853ba5808b795bed3b7fc2ba55274f

    • SHA1

      d669abbff493925068e637b999cb28cfbc2181a0

    • SHA256

      cae1d06781f000cf396269e2b734d841192b2b09e7e1e9170b721ac77b70e741

    • SHA512

      33e621a67af9d89580e71e995024bb9b37a7b8c0e0d305c3cc46f957613599d8f85771655767bc97559f1330ba45e4fb6570fb49502627cb14e19955025a0771

    • SSDEEP

      12288:OhlGrKeQSPEIBrX01FURb5hvdCqBFkMNi29Kc4:OrGrlzL0M9QEi2Y

    Score
    10/10
    strratdiscoverypersistencestealertrojan

    • STRRAT

      STRRAT is a remote access tool than can steal credentials and log keystrokes.

      trojanstealerstrrat

    • Drops startup file

    • Loads dropped DLL

    • Modifies file permissions

      discovery

    • Adds Run key to start application

      persistence

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks