General

  • Target

    25072024_0634_duty1.jar

  • Size

    202KB

  • MD5

    482bd2427eaf1fe50697919c6741ae82

  • SHA1

    28f52c11312a36688d8e56cbfada4d9983efa1fb

  • SHA256

    f8e4c56ef49ada4ef559292bada86a85db5b4a924ed1cb593c72f32655af3e66

  • SHA512

    77c7b0fcb1ba3061546f6f12af1b1cb4f1195f92a8f4aa1454eb482e4a9ea315d51dc7edf075b240d7f8b650a4ce7cad8c426f57406d27d8f7518abfea570191

  • SSDEEP

    6144:EWPeWfEqDo2s3Jm+7UNkEbVmoDU/U37Pa:6Rqls3JHCkrfai

Score
10/10

Malware Config

Extracted

Family

strrat

C2

94.156.68.149:1616

Attributes
  • license_id

    LY6A-TUCK-H5Q0-C3NO-6XHG

  • plugins_url

    http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5

  • scheduled_task

    true

  • secondary_startup

    true

  • startup

    true

Signatures

Files

  • 25072024_0634_duty1.jar
    .jar