Extracted

• • Target

    20122024_0920_19122024_MBF-667548.jar

  • Size

    202KB

  • MD5

    343aff03f4582c780ce776fd6a794aa9

  • SHA1

    0901376c44403e0c4c15955628831fdb38e071e4

  • SHA256

    b7e88ae109f765c4456e0e3239e5b565908caf87c9cae4fb54d48921e8645766

  • SHA512

    64650c28c23d23b8549f783303d87284adcc7ffc038a93a3ac2856b48adc6e003e320565526978f52ba3fad4c75fb6ab8a76281f28df6616ece83757842ac04b

  • SSDEEP

    6144:4epoWhEq3+wIZZo4JKNqgbV6uDUFe7N7P:Kvq5IZZ7Cq7Pej

  Score

  10^/10

  strratpersistencestealertrojan

  • STRRAT

    STRRAT is a remote access tool than can steal credentials and log keystrokes.

    trojanstealerstrrat

  • Strrat family

    strrat

  • Drops startup file

  • Loads dropped DLL

  • Adds Run key to start application

    persistence

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2