Overview

overview

10

Static

static

1

2ba5984166...fee.js

windows7-x64

3

2ba5984166...fee.js

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2ba5984166e81de73b0efe2fbbc277e3517f24617ffbb3e399074c63f209cfee.js

  • Size

    198KB

  • Sample

    250223-cm9a9avndl

  • MD5

    6a67092c4f3c31970d4f8c17092da298

  • SHA1

    22c93e55c986231383321f078dbedebb1b390b0e

  • SHA256

    2ba5984166e81de73b0efe2fbbc277e3517f24617ffbb3e399074c63f209cfee

  • SHA512

    b01a71666b5b363d7933793f0c633cfc3315af3f993683ce3b8ac00ca003ffc9a6b8723b8e7013f0f065513e62d5f08e5ac67d14b2689f6ad370ff62718efe79

  • SSDEEP

    3072:eQcWiEj/nMMJb9UFdQvgr1+J6hQvla9nLeVTV+Drz78GnVIzZGbfH7:eQcW97UFdH+UadanLUV+3LyE

Score
10/10
strratexecutionstealertrojan

Malware Config

Targets

    • Target

      2ba5984166e81de73b0efe2fbbc277e3517f24617ffbb3e399074c63f209cfee.js

    • Size

      198KB

    • MD5

      6a67092c4f3c31970d4f8c17092da298

    • SHA1

      22c93e55c986231383321f078dbedebb1b390b0e

    • SHA256

      2ba5984166e81de73b0efe2fbbc277e3517f24617ffbb3e399074c63f209cfee

    • SHA512

      b01a71666b5b363d7933793f0c633cfc3315af3f993683ce3b8ac00ca003ffc9a6b8723b8e7013f0f065513e62d5f08e5ac67d14b2689f6ad370ff62718efe79

    • SSDEEP

      3072:eQcWiEj/nMMJb9UFdQvgr1+J6hQvla9nLeVTV+Drz78GnVIzZGbfH7:eQcW97UFdH+UadanLUV+3LyE

    Score
    10/10
    executionstrratstealertrojan

    • STRRAT

      STRRAT is a remote access tool than can steal credentials and log keystrokes.

      trojanstealerstrrat

    • Strrat family

      strrat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks