Overview

overview

10

Static

static

10

05022025_1...EN.jar

windows7-x64

1

05022025_1...EN.jar

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    05022025_1543_04022025_NUEVO ORDEN.jar

  • Size

    264KB

  • Sample

    250205-s56k3ssqas

  • MD5

    c7ddae45be7df44936f1f4fd85c8f2a0

  • SHA1

    0a6832c04cc29031b74dbab661a7b6511424acb5

  • SHA256

    eabec9a614aa3ec6a0d7f660089bc544613b27aaebf3b8667258b85a765684c9

  • SHA512

    3bd1463d655f0fb7dc9a66dc519c64294352047d55c927efc03161a4acf755b4eb64278b759ab8281cf3b8568960f60cf40ec3752dc7c2d2626092fc3cb6b0e0

  • SSDEEP

    3072:bDPeP7u9Fs51byfWSrFRbu+BjqEJdfE4rBQfGMhAL4uff0xL0fp/AldlyCN:2P7uns514LZu+dfE7fRhn/0hDCN

Score
10/10
strratpersistencestealertrojan

Malware Config

Extracted

Family

strrat

C2

176.65.139.53:1999

127.0.0.1:1999
Attributes
  • license_id

    0801-GRBL-SUN9-LG8M-2C9C

  • plugins_url

    http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5

  • scheduled_task

    true

  • secondary_startup

    true

  • startup

    true

Targets

    • Target

      05022025_1543_04022025_NUEVO ORDEN.jar

    • Size

      264KB

    • MD5

      c7ddae45be7df44936f1f4fd85c8f2a0

    • SHA1

      0a6832c04cc29031b74dbab661a7b6511424acb5

    • SHA256

      eabec9a614aa3ec6a0d7f660089bc544613b27aaebf3b8667258b85a765684c9

    • SHA512

      3bd1463d655f0fb7dc9a66dc519c64294352047d55c927efc03161a4acf755b4eb64278b759ab8281cf3b8568960f60cf40ec3752dc7c2d2626092fc3cb6b0e0

    • SSDEEP

      3072:bDPeP7u9Fs51byfWSrFRbu+BjqEJdfE4rBQfGMhAL4uff0xL0fp/AldlyCN:2P7uns514LZu+dfE7fRhn/0hDCN

    Score
    10/10
    strratpersistencestealertrojan

    • STRRAT

      STRRAT is a remote access tool than can steal credentials and log keystrokes.

      trojanstealerstrrat

    • Strrat family

      strrat

    • Drops startup file

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks