General

  • Target

    2da0dbdf06277826bdc7e7a48aac75bddb572b2e2a2aaacb4ed6fd9724435bd9

  • Size

    203KB

  • MD5

    c34b438a0f693db2623a61b43cffa1db

  • SHA1

    122695aca182f85b0509b1f9564898e4ac471c80

  • SHA256

    2da0dbdf06277826bdc7e7a48aac75bddb572b2e2a2aaacb4ed6fd9724435bd9

  • SHA512

    8621b081034227e8da4f5032f8d8e8d9140000eb79947e11f6ecee1a227df9eb543bbcf7fc261d926e25f6a27a4320bdca0d49dea10090445cabd3cf287b57e9

  • SSDEEP

    6144:1F/DpIMnO/RzPRAqRyD95XxclU6hAD1SsbwFAl:1F/1IMnA6qRM95++6KSsXl

Score
10/10

Malware Config

Extracted

Family

strrat

C2

78.142.18.110:4001

193.142.146.101:4002

Attributes
  • license_id

    VGTC-23I1-3URP-OEH5-5KK7

  • plugins_url

    http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5

  • scheduled_task

    true

  • secondary_startup

    true

  • startup

    true

Signatures

Files

  • 2da0dbdf06277826bdc7e7a48aac75bddb572b2e2a2aaacb4ed6fd9724435bd9
    .zip
  • PTIN_Report_PDF.jar
    .jar