Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
SHIPPING DOCS#04765342CHU.PDF.jar
Resource
win7-20250207-en
Behavioral task
behavioral2
Sample
SHIPPING DOCS#04765342CHU.PDF.jar
Resource
win10v2004-20250217-en
General
-
Target
13032025_1404_SHIPPING DOCS#04765342CHU.PDF.jar.zip
-
Size
186KB
-
MD5
84b444351ed60bfe2be691cd4d17c768
-
SHA1
62ffd7141b678a2f027a1aa689a03ccf311b7ea1
-
SHA256
e1c2441658102934f84d5eca4206c784330ffcd5afd0d1388f3c028557cfbfda
-
SHA512
aa99f485f18aae83953c241cabd7037efaffc1f3702ed130fe379484b0adb1337bced9fa75f359f460cd05db59865799303ef7080858072ff4c9c7aa2632058a
-
SSDEEP
3072:BZJL9bX7mAtsHAUtQC4Dh0eNMv2r13T9CeR2gT8el3voPijXISfT:bJLFXVtIIh0eNmG1DDRtoe5voPijX5
Malware Config
Extracted
strrat
eastsiders.mefound.com:1794
-
license_id
IIZH-5GR9-567Z-IO0J-WWD7
-
plugins_url
http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5
-
scheduled_task
true
-
secondary_startup
true
-
startup
true
Signatures
-
Strrat family
Files
-
13032025_1404_SHIPPING DOCS#04765342CHU.PDF.jar.zip.zip
Password: infected
-
SHIPPING DOCS#04765342CHU.PDF.jar.jar