General

  • Target

    f176ef480ce4a1d724c4a4f9285eaa51d86b91d6623277d2e1ecb42e38752d9d.zip

  • Size

    173KB

  • MD5

    9c28dd0c2a8bf65dc4534cf93ed895ab

  • SHA1

    c13c938ad568c6ec4a5d3040aa65a2823c4a440a

  • SHA256

    f176ef480ce4a1d724c4a4f9285eaa51d86b91d6623277d2e1ecb42e38752d9d

  • SHA512

    39422f41f69df6b89e51c801624d1a0a6a446e94a67e79745fb1fd2ab8637d83a2c5f7ac7818b892380415e451e1d8add3dbd132472e5dc2430e3da291a9f268

  • SSDEEP

    3072:1hDepamMhWCEUn5zhb0Az4cZvO2VBMe7Ip7WWeCRYDuhtj/du9YC:3epRuxhbdlB17QeCq61u9YC

Score
10/10

Malware Config

Extracted

Family

strrat

C2

evilginx.misecure.com:1790

Attributes
  • license_id

    RKA0-KES0-EPPK-UDRO-JNCG

  • plugins_url

    http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5

  • scheduled_task

    true

  • secondary_startup

    true

  • startup

    true

Signatures

Files

  • f176ef480ce4a1d724c4a4f9285eaa51d86b91d6623277d2e1ecb42e38752d9d.zip
    .zip
  • Shipping Bill No6239999Dt09122024.PDF.jar
    .jar