Behavioral task
behavioral1
Sample
Shipping Bill6239999 dated 13122024.PDF.jar
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Shipping Bill6239999 dated 13122024.PDF.jar
Resource
win10v2004-20241007-en
General
-
Target
a74fc7f878df16614e19a516028df03780faa5f8526ce545a8d5dcfcd28cc26b.zip
-
Size
173KB
-
MD5
7c81fda49fc93a0f9c674a962a4aa372
-
SHA1
201bf8fc82788d0f970833d64b4e2f072d85b7ad
-
SHA256
a74fc7f878df16614e19a516028df03780faa5f8526ce545a8d5dcfcd28cc26b
-
SHA512
6524ee5d15f5e2c5de5f8ccebe26ead3bc16db8f56e083f90152cdf2f5b4dc21a0bf509fe17c1ecdc3ad8f6825a824ce2873cfea8ea406f960f6f9befcbd8128
-
SSDEEP
3072:S3/IlG7cCjSlVwhhhwj0Dx6kQQNpzNdVfU9CYrOAOzNy2gRXFOTEs9dQ:S3/IlGLWlqfwAs+1NdVfkqzLgonQ
Malware Config
Extracted
strrat
evilginx.misecure.com:1790
-
license_id
RKA0-KES0-EPPK-UDRO-JNCG
-
plugins_url
http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5
-
scheduled_task
true
-
secondary_startup
true
-
startup
true
Signatures
-
Strrat family
Files
-
a74fc7f878df16614e19a516028df03780faa5f8526ce545a8d5dcfcd28cc26b.zip.zip
-
Shipping Bill6239999 dated 13122024.PDF.jar.jar