Extracted

• • Target

    UPDATED_PO_9587483.jar

  • Size

    265KB

  • MD5

    41856a018cbd1dc677eed38ad8cf9724

  • SHA1

    74d2964716fcd41dd3b11c4f489f75ff8355b7b0

  • SHA256

    4cb1d47e690d235180af017ab57ba220d8b792160d34b4309829da8808437e11

  • SHA512

    df93fd7e45a6e1bac72f3c0851f731e3256f4bc54e84ba2a7a8ad775b571a78f541f774fa217abbda3d3f7ac66e4e5077deb32ae7b16a09a2a68d7ed5c4adf20

  • SSDEEP

    6144:xirWMsbCjzX7g6FgrlLdZXAe8Db36Nl2uS:x7R6ippyvaNQuS

  Score

  10^/10

  strratpersistencestealertrojan

  • STRRAT

    STRRAT is a remote access tool than can steal credentials and log keystrokes.

    trojanstealerstrrat

  • Strrat family

    strrat

  • Drops startup file

  • Loads dropped DLL

  • Adds Run key to start application

    persistence

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2