Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

SHIPPING D...DF.jar

windows7-x64

3

SHIPPING D...DF.jar

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    13032025_1404_SHIPPINGDOCS04765342CHU.PDF.jar.zip

  • Size

    186KB

  • Sample

    250313-rp4k4svtay

  • MD5

    84b444351ed60bfe2be691cd4d17c768

  • SHA1

    62ffd7141b678a2f027a1aa689a03ccf311b7ea1

  • SHA256

    e1c2441658102934f84d5eca4206c784330ffcd5afd0d1388f3c028557cfbfda

  • SHA512

    aa99f485f18aae83953c241cabd7037efaffc1f3702ed130fe379484b0adb1337bced9fa75f359f460cd05db59865799303ef7080858072ff4c9c7aa2632058a

  • SSDEEP

    3072:BZJL9bX7mAtsHAUtQC4Dh0eNMv2r13T9CeR2gT8el3voPijXISfT:bJLFXVtIIh0eNmG1DDRtoe5voPijX5

Score
10/10
strratdiscoverypersistencestealertrojan

Malware Config

Extracted

Family

strrat

C2

eastsiders.mefound.com:1794

Attributes
  • license_id

    IIZH-5GR9-567Z-IO0J-WWD7

  • plugins_url

    http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5

  • scheduled_task

    true

  • secondary_startup

    true

  • startup

    true

Targets

    • Target

      SHIPPING DOCS#04765342CHU.PDF.jar

    • Size

      211KB

    • MD5

      1d85e90da37068b469c780fc7a48e39d

    • SHA1

      fd8c444b811ed76f1f21656db03fc4488cc07309

    • SHA256

      5f254a78f046f08ddd45e1c1dfcdb3fe0be8258b207f874bc95bf269fe0713fa

    • SHA512

      f65fae46e5a6320e052a52b5535e2c0a84b569abd4d1ea314499ec6791172492a3e4f36462bd88a22638fa75cdf2bc1049a313a7389097e66b87cbe435878e23

    • SSDEEP

      3072:szR7A2Y0gUMxGZrrOVCobiBTr7zVTL8mPfiswap2OGr64BH4eyfJuoXvIFLB+yTz:4RLtMxyOVHiF75Tok7p2hNkIF1+yTbYQ

    Score
    10/10
    discoverystrratpersistencestealertrojan

    • STRRAT

      STRRAT is a remote access tool than can steal credentials and log keystrokes.

      trojanstealerstrrat

    • Strrat family

      strrat

    • Drops startup file

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks