General

  • Target
    cd0efb507debe4ce7d2e881ad977bb030dea0ee3bcf1d9d59552543a143bd60a.zip
  • Size 184KB
  • Sample241122-dmancstkdw
  • SHA256 cd0efb507debe4ce7d2e881ad977bb030dea0ee3bcf1d9d59552543a143bd60a
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • strrat

C2
  • macostopacros.3utilities.com:3095

  • prtoacasedted.3utilities.com:4056

Attributes
  • license_id

    17SH-99EQ-GWIE-XC0R-AXNZ

  • plugins_url

    http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5

  • scheduled_task

    false

  • secondary_startup

    true

  • startup

    true

Targets

    • Target
      Punjb_national_bnk_024_late_return_counta_Inward-clearin_jpg.jar
    • Size 190KB
    • SHA256 bbd5de9d533b350b86e4d9aa54b6545c6e890c4f263ad27433b2c995faf89493
    • MD5 SHA1 SHA512 SSDEEP
    Score
    7/10
    • Drops startup file

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks