General

  • Target

    Titan_Crypter_Cracked.7z

  • Size

    17.6MB

  • MD5

    55a7f8f8b28c1ab8eda552de7071b75f

  • SHA1

    8da38fc369c78d2f972c599631e4c3dd1032fff6

  • SHA256

    483c6ff2b0dff0d91196eb8cdb4a4cf67d6ead53b1645bc03cf7b88f8da5e22b

  • SHA512

    010e9d7a6c012123b2c05e8bb4411e72478c05223d3ec143ac685107405dcc6db05e779799f8db691b77bf93356a2644a5ace5a06daeaf1ce5165302c20d80f7

  • SSDEEP

    393216:v1S0Cxjjva2q3vgQ7Pb75AYTSn7oQMJ08gHAyZJN1uSge:9S0gjG22vgQ7T6xn1MJdGAyZJCW

Score
10/10

Malware Config

Extracted

Family

strrat

C2

mpcmdrun.ydns.eu:10000

defender.ydns.eu:9999

Attributes
  • license_id

    khonsari

  • plugins_url

    http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5

  • scheduled_task

    false

  • secondary_startup

    true

  • startup

    true

Signatures

  • Detect Neshta payload 1 IoCs
  • Neshta family
  • Strrat family
  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • Titan_Crypter_Cracked.7z
    .7z
  • Titan Crypter Cracked/Titan Crypter Cracked/DNGRTx64.dll
    .dll windows:6 windows x64 arch:x64

    4392f67b7daf185a12509fa625efba9b


    Headers

    Imports

    Exports

    Sections

  • Titan Crypter Cracked/Titan Crypter Cracked/DNGRTx86.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Exports

    Sections

  • Titan Crypter Cracked/Titan Crypter Cracked/Patch.exe
    .exe windows:4 windows x86 arch:x86

    ab6770b0a8635b9d92a5838920cfe770


    Headers

    Imports

    Sections

  • 77WfN0rQS5VhH8K.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Java 12.jar
    .jar
  • Patch.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • Titan Crypter.js
    .js
  • xdownlo64.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Titan Crypter Cracked/Titan Crypter Cracked/Read Carefully.txt
  • Titan Crypter Cracked/Titan Crypter Cracked/Titan Crypter.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections