Overview

overview

10

Static

static

1

Payment.Telex-pdf.jar

windows7-x64

1

Payment.Telex-pdf.jar

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Payment.Telex-pdf.jar

  • Size

    410KB

  • Sample

    241014-wme7ysscnj

  • MD5

    090067ccd28dc697d7f84eda16ec894d

  • SHA1

    ffe35109e8e015a0a5c851b2762a3d78be64d4d6

  • SHA256

    e05754709194a77dbb090e99877d0df694b1e86b15afb467a930a5d934a08ac0

  • SHA512

    2069584c2327f294c207c324dbb3e8c0fa7758799423b255ccf9eb311a7821f08071f316767497747b26b8c0d9be051752d92415e04f343be650a673b779b91f

  • SSDEEP

    6144:4N1Ezmx5uv9Acyk2ObLaJaJ+rY7J46/jU5VQVCCQVoDF3pKGIH0Qu8r0Rss6E:4NWmxwlAZBObLaJakr03/jFpKXO8r0L

Score
10/10
strratpersistencestealertrojan

Malware Config

Targets

    • Target

      Payment.Telex-pdf.jar

    • Size

      410KB

    • MD5

      090067ccd28dc697d7f84eda16ec894d

    • SHA1

      ffe35109e8e015a0a5c851b2762a3d78be64d4d6

    • SHA256

      e05754709194a77dbb090e99877d0df694b1e86b15afb467a930a5d934a08ac0

    • SHA512

      2069584c2327f294c207c324dbb3e8c0fa7758799423b255ccf9eb311a7821f08071f316767497747b26b8c0d9be051752d92415e04f343be650a673b779b91f

    • SSDEEP

      6144:4N1Ezmx5uv9Acyk2ObLaJaJ+rY7J46/jU5VQVCCQVoDF3pKGIH0Qu8r0Rss6E:4NWmxwlAZBObLaJakr03/jFpKXO8r0L

    Score
    10/10
    strratpersistencestealertrojan

    • STRRAT

      STRRAT is a remote access tool than can steal credentials and log keystrokes.

      trojanstealerstrrat

    • Drops startup file

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks