Overview

overview

10

Static

static

10

e1d2b30072...4f.jar

windows7-x64

1

e1d2b30072...4f.jar

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e1d2b3007263f768311ead42b9e5fa724623ce47ac1867dbafc5be1282ae374f.jar

  • Size

    263KB

  • Sample

    250121-erl3mawkcj

  • MD5

    82313afc20d6da54be1f9190809d61ac

  • SHA1

    1a987cabbb2d21e1db0859536ed728ddf577e804

  • SHA256

    e1d2b3007263f768311ead42b9e5fa724623ce47ac1867dbafc5be1282ae374f

  • SHA512

    c85002dccd3a1c18d36e03c94a7afd7c7976bb3cf9a480b10eeb910eb0987648c8c74ae8ca28799568d1c0130225c689a17c6f3eefd6397222909789a97f6383

  • SSDEEP

    3072:DFoa3eQDjCRBdgvjkpkNlO0ZuHMm3M/JBMKrgXJ0bvmlWTlHkRFIq306xfy+II:xDPOd8jXlbQ38//MwmJ0bvuWmznEEv

Score
10/10
strratpersistencestealertrojan

Malware Config

Extracted

Family

strrat

C2

www.kposlifestyle.design:1980

127.0.0.1:1980
Attributes
  • license_id

    0801-GRBL-SUN9-LG8M-2C9C

  • plugins_url

    http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5

  • scheduled_task

    true

  • secondary_startup

    true

  • startup

    true

Targets

    • Target

      e1d2b3007263f768311ead42b9e5fa724623ce47ac1867dbafc5be1282ae374f.jar

    • Size

      263KB

    • MD5

      82313afc20d6da54be1f9190809d61ac

    • SHA1

      1a987cabbb2d21e1db0859536ed728ddf577e804

    • SHA256

      e1d2b3007263f768311ead42b9e5fa724623ce47ac1867dbafc5be1282ae374f

    • SHA512

      c85002dccd3a1c18d36e03c94a7afd7c7976bb3cf9a480b10eeb910eb0987648c8c74ae8ca28799568d1c0130225c689a17c6f3eefd6397222909789a97f6383

    • SSDEEP

      3072:DFoa3eQDjCRBdgvjkpkNlO0ZuHMm3M/JBMKrgXJ0bvmlWTlHkRFIq306xfy+II:xDPOd8jXlbQ38//MwmJ0bvuWmznEEv

    Score
    10/10
    strratpersistencestealertrojan

    • STRRAT

      STRRAT is a remote access tool than can steal credentials and log keystrokes.

      trojanstealerstrrat

    • Strrat family

      strrat

    • Drops startup file

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks