strrat | 42b99bbf0961d2c5a4dfeeea07f85733eed2ce2f5571904453ae56c4e6e90c7f | Triage

Sharing

General

Target

42b99bbf0961d2c5a4dfeeea07f85733eed2ce2f5571904453ae56c4e6e90c7f.jar
Size

400KB
Sample

240821-l7k9lasemf
MD5

f6b06af9e65718cfa313431a653f4663
SHA1

b4ee8f08a515201ad692c2252f8259611ae245a3
SHA256

42b99bbf0961d2c5a4dfeeea07f85733eed2ce2f5571904453ae56c4e6e90c7f
SHA512

989f546273b1ed0beabb85de886c0edf24f95f605a1c33c0457e900af4f86100b27398dc94a2fdc5b99c5075755d13a75e3535c6912350efaaf6d1077ce21a63
SSDEEP

12288:WXN+HTi58brPDRsjv7L35TCjcjNP9iNau:WdaTi5SCnpnP9Qx

Score

10^/10

strrat persistence stealer trojan

Malware Config

Targets

- Target
  
  42b99bbf0961d2c5a4dfeeea07f85733eed2ce2f5571904453ae56c4e6e90c7f.jar
- Size
  
  400KB
- MD5
  
  f6b06af9e65718cfa313431a653f4663
- SHA1
  
  b4ee8f08a515201ad692c2252f8259611ae245a3
- SHA256
  
  42b99bbf0961d2c5a4dfeeea07f85733eed2ce2f5571904453ae56c4e6e90c7f
- SHA512
  
  989f546273b1ed0beabb85de886c0edf24f95f605a1c33c0457e900af4f86100b27398dc94a2fdc5b99c5075755d13a75e3535c6912350efaaf6d1077ce21a63
- SSDEEP
  
  12288:WXN+HTi58brPDRsjv7L35TCjcjNP9iNau:WdaTi5SCnpnP9Qx
Score

10^/10

strrat persistence stealer trojan
- STRRAT
  STRRAT is a remote access tool than can steal credentials and log keystrokes.
  trojan stealer strrat
- Drops startup file
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Scheduled Task

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Scheduled Task

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

strratpersistencestealertrojan