Behavioral task
behavioral1
Sample
NeftPaymentError_details__Emdtd22102024_jpg.jar
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
NeftPaymentError_details__Emdtd22102024_jpg.jar
Resource
win10v2004-20241007-en
General
-
Target
NeftPaymentError_details__Emdtd22102024_jpg.zip
-
Size
63KB
-
MD5
db9f6b1d7cb980026a0cb5fd46a4ee99
-
SHA1
e58649cabc4a37839022d988169c2ca19dfe5349
-
SHA256
0eb565e333004d4777bf89cd11e10bb0d02dd2fd24b7b2c5b4f642a82a8e94dd
-
SHA512
a64851882ffa596eabebb529a14bf43d71ac48a25063565f97a014670cd3ab3e58453ff976f018fe8da7627203cc1ea5dcc8f04db0394e30ae0d90d495d885c3
-
SSDEEP
1536:4F2hLlkJB45OEiTXR7ESs/pwzlkbBoDJ0EJ:4uJkk5Juh7Ez/pwzlSBoJ
Malware Config
Extracted
strrat
macostopacros.3utilities.com:3095
prtoacasedted.3utilities.com:4056
-
license_id
17SH-99EQ-GWIE-XC0R-AXNZ
-
plugins_url
http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5
-
scheduled_task
true
-
secondary_startup
true
-
startup
true
Signatures
-
Strrat family
Files
-
NeftPaymentError_details__Emdtd22102024_jpg.zip.zip
-
NeftPaymentError_details__Emdtd22102024_jpg.jar.jar