General

  • Target
    12ae19d6af14f2079de31e5188849d2e.bin
  • Size 194KB
  • Sample241129-bctx5sspdj
  • SHA256 b05eb6983efad1dd7b27893f3b99c8e72a68b943c37df5e151657de242339dcd
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • strrat

C2
  • badmiles.ddns.net:5055

Attributes
  • license_id

    4OI0-V4TA-Z8G4-WQF1-B9VH

  • plugins_url

    http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5

  • scheduled_task

    true

  • secondary_startup

    true

  • startup

    true

Signatures

File Explorer

  • 12ae19d6af14f2079de31e5188849d2e.bin
    .zip 194KB
  • 4c7d1c638f7d679e0356cf63774f39abef984a6073e0698b21769fbaef1c7162.jar
    .jar 264KB

12ae19d6af14f2079de31e5188849d2e.bin

  • SHA256 b05eb6983efad1dd7b27893f3b99c8e72a68b943c37df5e151657de242339dcd
  • MD5 SHA1 SHA512 SSDEEP
Password
infected