Extracted

• • Target

    aeb801eba402a4f10fd1f15286974f3d524ed21f09e4edce40548d3ec74d329d.jar

  • Size

    270KB

  • MD5

    2fc3e196a69266976b818ddc4c7833d6

  • SHA1

    a49408dfee4a32da9b342d050ff990abc627d92b

  • SHA256

    aeb801eba402a4f10fd1f15286974f3d524ed21f09e4edce40548d3ec74d329d

  • SHA512

    52c53bf95639f00d41cc2d12e05f27bca8d8417c2abeb2ecde609e3a191f9069c1210fc1851d9f7f514fc15494ac3802a0159c7cc3924ed12d74bdd5d802c4b4

  • SSDEEP

    6144:KqTBRHRPHuWkh9HgQTetWUhv1AyeKDwciWBW:DRHR/uWkh9hehv1ltZW

  Score

  10^/10

  strratdiscoverypersistencestealertrojan

  • STRRAT

    STRRAT is a remote access tool than can steal credentials and log keystrokes.

    trojanstealerstrrat

  • Strrat family

    strrat

  • Downloads MZ/PE file

  • Drops startup file

  • Loads dropped DLL

  • Adds Run key to start application

    persistence

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2