Behavioral task
behavioral1
Sample
INV32762.jar
Resource
win7-20240903-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
INV32762.jar
Resource
win10v2004-20241007-en
windows10-2004-x64
9 signatures
150 seconds
General
-
Target
INV32762.jar
-
Size
198KB
-
MD5
0326cd8bc7583d4ef9bd89e158f504e4
-
SHA1
87a3f552568e6b5209fb8b44c2c6c0b50c8ca46f
-
SHA256
a5d4d6644f4c0fbacd3781a2d151e76bcd45de2da0dbf458cba84b8e34c9c1d0
-
SHA512
ebf29aeaa9f4ad8a613cab52278568efc70aed6c1032c1f92b53ba9a258cb80b4b5d209e588d8a169493754a34c9495a9ab3e9157983d65c0e9291c8af8c6b5c
-
SSDEEP
3072:HEythVs8HXV0aq4fKjV/36nipUuAVfgSBfQWyn2wV6Vs21dl+ZXJCU7XRQ:HEEhVs8lrKkieuiBly2GMsodgXMgXRQ
Score
10/10
Malware Config
Extracted
Family
strrat
C2
www.kposlifestyle.design:1980
127.0.0.1:1980
Attributes
-
license_id
0801-GRBL-SUN9-LG8M-2C9C
-
plugins_url
http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5
-
scheduled_task
true
-
secondary_startup
true
-
startup
true
Signatures
-
Strrat family
Files
-
INV32762.jar.jar