Overview

overview

10

Static

static

10

MIS_FILE_9...ls.jar

windows7-x64

7

MIS_FILE_9...ls.jar

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    MIS_FILE_9888123_RECEIVED_xsls.zip
  • Size 184KB
  • Sample241121-phyeeawqal
  • SHA256 538aefe2d62a53a7b5991a4acda23b8f04aeba4fee1959018ddc375ed6858e5b
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
strrat

Malware Config

Extracted

Family

  • strrat

C2

  • macostopacros.3utilities.com:3095

  • prtoacasedted.3utilities.com:4056

Attributes
  • license_id

    17SH-99EQ-GWIE-XC0R-AXNZ

  • plugins_url

    http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5

  • scheduled_task

    false

  • secondary_startup

    true

  • startup

    true

Signatures

File Explorer

  • MIS_FILE_9888123_RECEIVED_xsls.zip
    .zip 184KB
  • MIS_FILE_9888123_RECEIVED_xsls.jar
    .jar 190KB

MIS_FILE_9888123_RECEIVED_xsls.zip

  • SHA256 538aefe2d62a53a7b5991a4acda23b8f04aeba4fee1959018ddc375ed6858e5b
  • MD5 SHA1 SHA512 SSDEEP