Overview

overview

10

Static

static

10

3eafb74de2...4b.jar

windows7-x64

1

3eafb74de2...4b.jar

windows10-1703-x64

10

3eafb74de2...4b.jar

windows10-2004-x64

7

3eafb74de2...4b.jar

windows11-21h2-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3eafb74de2ee510948914c85bc60f01044bae17b12055e892c1711abc20fd64b

  • Size

    203KB

  • Sample

    240706-szpelsshmm

  • MD5

    b6ca4213e6f097b3537f732a4ffd195f

  • SHA1

    59539ba574ca3ad901331cfaef98977d68fc3ee0

  • SHA256

    3eafb74de2ee510948914c85bc60f01044bae17b12055e892c1711abc20fd64b

  • SHA512

    ee17012dcfd98829e4a5fae7b11c7265a16ccdb3a0682968fd115b57fef10123ff9174119fbed70c2d1cd3d63eb8437ddc3f289da3652bdf1f8aac96cde5b0e1

  • SSDEEP

    3072:xxXgSiFF4/9Gc/GJrulpnKtQ3aeb01TdD9KQ0rSK2WF52G8a:xhgSiFFc/4Cl4qp01Tx9+SrG8a

Score
10/10
strratdiscoverypersistencestealertrojan

Malware Config

Extracted

Family

strrat

C2

dollarman101.hopto.org:6060

Attributes
  • license_id

    ZTT1-7ZAL-XCZM-48JG-C0LB

  • plugins_url

    http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5

  • scheduled_task

    true

  • secondary_startup

    true

  • startup

    true

Targets

    • Target

      3eafb74de2ee510948914c85bc60f01044bae17b12055e892c1711abc20fd64b

    • Size

      203KB

    • MD5

      b6ca4213e6f097b3537f732a4ffd195f

    • SHA1

      59539ba574ca3ad901331cfaef98977d68fc3ee0

    • SHA256

      3eafb74de2ee510948914c85bc60f01044bae17b12055e892c1711abc20fd64b

    • SHA512

      ee17012dcfd98829e4a5fae7b11c7265a16ccdb3a0682968fd115b57fef10123ff9174119fbed70c2d1cd3d63eb8437ddc3f289da3652bdf1f8aac96cde5b0e1

    • SSDEEP

      3072:xxXgSiFF4/9Gc/GJrulpnKtQ3aeb01TdD9KQ0rSK2WF52G8a:xhgSiFFc/4Cl4qp01Tx9+SrG8a

    Score
    10/10
    strratdiscoverypersistencestealertrojan

    • STRRAT

      STRRAT is a remote access tool than can steal credentials and log keystrokes.

      trojanstealerstrrat

    • Drops startup file

    • Loads dropped DLL

    • Modifies file permissions

      discovery

    • Adds Run key to start application

      persistence
    behavioral1behavioral2behavioral3behavioral4

MITRE ATT&CK Enterprise v15

Tasks