General

  • Target

    NEWORDER.jar

  • Size

    270KB

  • MD5

    2fc3e196a69266976b818ddc4c7833d6

  • SHA1

    a49408dfee4a32da9b342d050ff990abc627d92b

  • SHA256

    aeb801eba402a4f10fd1f15286974f3d524ed21f09e4edce40548d3ec74d329d

  • SHA512

    52c53bf95639f00d41cc2d12e05f27bca8d8417c2abeb2ecde609e3a191f9069c1210fc1851d9f7f514fc15494ac3802a0159c7cc3924ed12d74bdd5d802c4b4

  • SSDEEP

    6144:KqTBRHRPHuWkh9HgQTetWUhv1AyeKDwciWBW:DRHR/uWkh9hehv1ltZW

Score
10/10

Malware Config

Extracted

Family

strrat

C2

195.177.95.117:7800

Attributes
  • license_id

    DB1U-CVGT-7HUG-X0A0-GNWH

  • plugins_url

    http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5

  • scheduled_task

    true

  • secondary_startup

    true

  • startup

    true

Signatures

Files

  • NEWORDER.jar
    .jar