Overview

overview

10

Static

static

1

1C24TVT_00...df.jar

windows7-x64

1

1C24TVT_00...df.jar

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1C24TVT_00005055.pdf.jar

  • Size

    400KB

  • Sample

    240723-hemeeashqr

  • MD5

    0b6fbf92570074872a27c7c770e0df63

  • SHA1

    8e59ba98c196cd3c490ceffbadb3bacf5380d3fe

  • SHA256

    3546d4fa8249cfe559f61262d4914a3808ac7d9239d97ac91d57ef86c858b937

  • SHA512

    bae3b3ceef3d16386ef829d206cd94dd7c2e690d078720bbb5f1c57809569b2f6dd953764c1b8219558bfe7ae5df763fc4ccf7c789d90f562af545c03838f38f

  • SSDEEP

    12288:ujJmHTO5wfXjD5cnv7n3J3ijc3tP9iNSj:utiTO5OiL5fP9Q+

Score
10/10
strratpersistencestealertrojan

Malware Config

Targets

    • Target

      1C24TVT_00005055.pdf.jar

    • Size

      400KB

    • MD5

      0b6fbf92570074872a27c7c770e0df63

    • SHA1

      8e59ba98c196cd3c490ceffbadb3bacf5380d3fe

    • SHA256

      3546d4fa8249cfe559f61262d4914a3808ac7d9239d97ac91d57ef86c858b937

    • SHA512

      bae3b3ceef3d16386ef829d206cd94dd7c2e690d078720bbb5f1c57809569b2f6dd953764c1b8219558bfe7ae5df763fc4ccf7c789d90f562af545c03838f38f

    • SSDEEP

      12288:ujJmHTO5wfXjD5cnv7n3J3ijc3tP9iNSj:utiTO5OiL5fP9Q+

    Score
    10/10
    strratpersistencestealertrojan

    • STRRAT

      STRRAT is a remote access tool than can steal credentials and log keystrokes.

      trojanstealerstrrat

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks