Behavioral task
behavioral1
Sample
Shipping Bill No6239999Dt09122024.PDF.jar
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Shipping Bill No6239999Dt09122024.PDF.jar
Resource
win10v2004-20241007-en
General
-
Target
f176ef480ce4a1d724c4a4f9285eaa51d86b91d6623277d2e1ecb42e38752d9d.zip
-
Size
173KB
-
MD5
9c28dd0c2a8bf65dc4534cf93ed895ab
-
SHA1
c13c938ad568c6ec4a5d3040aa65a2823c4a440a
-
SHA256
f176ef480ce4a1d724c4a4f9285eaa51d86b91d6623277d2e1ecb42e38752d9d
-
SHA512
39422f41f69df6b89e51c801624d1a0a6a446e94a67e79745fb1fd2ab8637d83a2c5f7ac7818b892380415e451e1d8add3dbd132472e5dc2430e3da291a9f268
-
SSDEEP
3072:1hDepamMhWCEUn5zhb0Az4cZvO2VBMe7Ip7WWeCRYDuhtj/du9YC:3epRuxhbdlB17QeCq61u9YC
Malware Config
Extracted
strrat
evilginx.misecure.com:1790
-
license_id
RKA0-KES0-EPPK-UDRO-JNCG
-
plugins_url
http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5
-
scheduled_task
true
-
secondary_startup
true
-
startup
true
Signatures
-
Strrat family
Files
-
f176ef480ce4a1d724c4a4f9285eaa51d86b91d6623277d2e1ecb42e38752d9d.zip.zip
-
Shipping Bill No6239999Dt09122024.PDF.jar.jar