General

  • Target
    dd418fd6827cd6c3b3cda5f0b6f8e8e3b887d82b8ed51a3523475406e4850da7.js
  • Size 202KB
  • Sample241024-cstsrazeqb
  • SHA256 dd418fd6827cd6c3b3cda5f0b6f8e8e3b887d82b8ed51a3523475406e4850da7
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      dd418fd6827cd6c3b3cda5f0b6f8e8e3b887d82b8ed51a3523475406e4850da7.js
    • Size 202KB
    • SHA256 dd418fd6827cd6c3b3cda5f0b6f8e8e3b887d82b8ed51a3523475406e4850da7
    • MD5 SHA1 SHA512 SSDEEP
    • STRRAT

      STRRAT is a remote access tool than can steal credentials and log keystrokes.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks