Analysis

  • max time kernel
    73s
  • max time network
    77s
  • platform
    windows11-21h2_x64
  • resource
    win11-20250314-en
  • resource tags

    arch:x64arch:x86image:win11-20250314-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    25/03/2025, 18:30

General

  • Target

    StrixRat V2.0.7z

  • Size

    596.0MB

  • MD5

    ef8572b58bd0210182062c8179803926

  • SHA1

    5be46c4e0f910129626ae640b481b2878f7ff38a

  • SHA256

    7d57c62ff43795711fc426680559c96a3191f3d1bb838abd8a2b35c10b005206

  • SHA512

    5717cc6060f3c8e25095d63c253c52d258e859df64c40e648d296a6aa03b1e4690f94cb89edf0ade97b1f09814efe8ac6bb1384f2600739f7f7f9dce1de69c94

  • SSDEEP

    12582912:RuSP32Odbqk34uq3SZiKHgLLL+2Ls7CxlnzAFBxv3Pof4m7TbA:kS/2OFqc4YiKH0LGFBx3sT8

Malware Config

Signatures

  • Detect Neshta payload 1 IoCs
  • Neshta

    Malware from the neshta family is designed to infect itself into other files to spread itself and cause damage.

  • Neshta family
  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Obfuscated with Agile.Net obfuscator 2 IoCs

    Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry class 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 25 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 4 IoCs
  • Suspicious use of FindShellTrayWindow 2 IoCs

Processes

  • C:\Program Files\7-Zip\7zFM.exe
    "C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\StrixRat V2.0.7z"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    PID:4712
  • C:\Windows\System32\rundll32.exe
    C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
    1⤵
      PID:5512
    • C:\Users\Admin\Desktop\StrixRat V2.0\StrixRat.exe
      "C:\Users\Admin\Desktop\StrixRat V2.0\StrixRat.exe"
      1⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Enumerates system info in registry
      • Modifies registry class
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:2668
    • C:\Windows\system32\wbem\WmiApSrv.exe
      C:\Windows\system32\wbem\WmiApSrv.exe
      1⤵
        PID:3956

      Network

      MITRE ATT&CK Enterprise v15

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • C:\Users\Admin\AppData\Local\Temp\7zE862B55F7\StrixRat V2.0\res\Lib\platformBinary\platformBinary32\lib\images\cursors\win32_LinkNoDrop32x32.gif

        Filesize

        153B

        MD5

        1e9d8f133a442da6b0c74d49bc84a341

        SHA1

        259edc45b4569427e8319895a444f4295d54348f

        SHA256

        1a1d3079d49583837662b84e11d8c0870698511d9110e710eb8e7eb20df7ae3b

        SHA512

        63d6f70c8cab9735f0f857f5bf99e319f6ae98238dc7829dd706b7d6855c70be206e32e3e55df884402483cf8bebad00d139283af5c0b85dc1c5bf8f253acd37

      • C:\Users\Admin\AppData\Local\Temp\7zE862B55F7\StrixRat V2.0\res\Lib\platformBinary\platformBinary64\bin\java.exe

        Filesize

        216KB

        MD5

        185cfc468e8e8663d6abd73441946e58

        SHA1

        53742ec3edfcfcd80984538594ea3cb00a553182

        SHA256

        e3d4b273a5a317787b692b4975f1349c9b924df3d33f2487519c2aabba352383

        SHA512

        dcee704b787dc42620a85f860e2c4202e23daf317974fff0426e6aef9645e450eec46b7cb23c797faa75021362962fd5c257c650df8f7aaa6be3f02ba6be18c1

      • C:\Users\Admin\AppData\Local\Temp\7zE862B55F7\StrixRat V2.0\res\Lib\platformBinary\platformBinary64\bin\server\Xusage.txt

        Filesize

        1KB

        MD5

        b3174769a9e9e654812315468ae9c5fa

        SHA1

        238b369dfc7eb8f0dc6a85cdd080ed4b78388ca8

        SHA256

        37cf4e6cdc4357cebb0ec8108d5cb0ad42611f675b926c819ae03b74ce990a08

        SHA512

        0815ca93c8cf762468de668ad7f0eb0bdd3802dcaa42d55f2fb57a4ae23d9b9e2fe148898a28fe22c846a4fcdf1ee5190e74bcdabf206f73da2de644ea62a5d3

      • C:\Users\Admin\AppData\Local\Temp\7zE862B55F7\StrixRat V2.0\res\Lib\signapk.jar

        Filesize

        938KB

        MD5

        947070d11359bc1620536489b366f446

        SHA1

        9dd3a070770a55b92d00bfa519960535845ba374

        SHA256

        4295ef085c0de5cbd5d8e4c73126e948e20d3126db26a4f60125864c15f8b8cb

        SHA512

        8089650da841f10b9ecc33e4d9725e05a06e22821f0c023c1e1eb814916e313142094b52b1396c841d17a4d60a952450399bfd91748dfabfe90476f25cc0a6d0

      • C:\Users\Admin\AppData\Local\Temp\7zE862B55F7\StrixRat V2.0\res\Library\temp\res\drawable-xhdpi\abc_list_divider_mtrl_alpha.9.png

        Filesize

        78B

        MD5

        6be3125e81a355ba059060aed0d2e45c

        SHA1

        7dc9e63b8e6a97a9864e89bdaa484e4a33b80909

        SHA256

        0f939ad7987b8e8440bebfc7b20cd9bb042e95c9041f4485cf280e13cde8f7b2

        SHA512

        cef954abc2ac3c6e9a7f275b8b1cbfca09dbff3ed034c64bc526a21048b571e44af3fcfd47b55d1fc8b82deed3bf1be4ea47876048a04c21d54f2183bfbda11c

      • C:\Users\Admin\AppData\Local\Temp\7zE862B55F7\StrixRat V2.0\res\Library\temp\res\values-en-rGB\strings.xml

        Filesize

        1KB

        MD5

        8ac8a301280e9193516d1b79f9dfe16d

        SHA1

        350c5a1ae51f530918ea853517a7a43ef84ca079

        SHA256

        260eb587ea8c0ce1681411dfc01c31b930eebb47e04bdd9a6dae28be904fab1f

        SHA512

        0f286c01840907a7402a57253202442a0495f892d01e76f6a690feed6820e4a0226430fdf1942b1f2468d635c71c88af3a23928c35ef8b7c63b55e17f6c566ff

      • C:\Users\Admin\AppData\Local\Temp\7zE862B55F7\StrixRat V2.0\res\Library\temp\temp\res\color-v23\abc_tint_edittext.xml

        Filesize

        407B

        MD5

        c4fe75ddb4f2a07115fe6720550ac4dc

        SHA1

        a315dd6054ac4a7cb7a0a4ed7fd2ce8af204e8db

        SHA256

        c31b0be914d1cd3528f354109274eea7def611079c0461e63f7d6cadd8bb9631

        SHA512

        1f63174aaf71c733a8620d01d77aad3fd951efa8c2ebc75e9293055b6395bdbdfc17fc74ed7cebb1ffcaa61da2b6a3c00dec8fd537d2ae97451ad5c7a58feb84

      • C:\Users\Admin\AppData\Local\Temp\7zE862B55F7\StrixRat V2.0\res\Library\temp\temp\res\color\abc_tint_edittext.xml

        Filesize

        455B

        MD5

        a0b8bdf33dfebefb3800f81aca066886

        SHA1

        ac39bf24c9315efe2b20c12d64f8a47b28051474

        SHA256

        e9a7328c99aa46aa7bc3a81b8e8c00ca4cd48ce6e1015e7bd8f6ff36bb282e07

        SHA512

        ea299aae9d35c66e7193199960b54ef1dcd86317a0ae410db27769297627f2dea0a132012c429a68ee064de2a55ca1483d3897a7290e33b12ff82c51ce60c6f5

      • C:\Users\Admin\AppData\Local\Temp\7zE862B55F7\StrixRat V2.0\res\Library\temp\temp\res\drawable-hdpi\abc_ic_star_black_48dp.png

        Filesize

        1KB

        MD5

        fdce414b7a6adbbd59a43e1024d10139

        SHA1

        3c793ad7346a7fa0f4f8d815e43028c2e98a6033

        SHA256

        3be35c7d843879bd75b4628f64238efb6c1f79defaac1a97dce0427846766a96

        SHA512

        231d9721c71ebca856ad4699de1b507baf50c4e6702329282ba3cccf0b13cf920dd200df8f66e43b5615a2fec9be4b70f7006f11bf8dd23be690f5723a0e3edd

      • C:\Users\Admin\AppData\Local\Temp\7zE862B55F7\StrixRat V2.0\res\Library\temp\temp\res\drawable-hdpi\abc_ic_star_half_black_48dp.png

        Filesize

        783B

        MD5

        60260b2404db00f3a8500d5a2beea094

        SHA1

        4e56f2658bfd1f51c25e0529c580cb505a6181ca

        SHA256

        e803dce240b2a403701a45be483cc2dc3e198a7d3e7cf724b3005aeb871d1918

        SHA512

        d2afd78892c36b67fca029b759a87a9374a42ebe0d6a0d1105f64e865fafbb79532ac40c6d18e31d66f91fd92e891da0971ce9f5613c95ade27a15ef7bc2ab34

      • C:\Users\Admin\AppData\Local\Temp\7zE862B55F7\StrixRat V2.0\res\Library\temp\temp\res\drawable-mdpi\abc_ic_star_black_48dp.png

        Filesize

        892B

        MD5

        9421d0fbf5d41256b1652f368e0d3fe8

        SHA1

        4e7859a0ca053f4599e4b02e42c17134298b8e82

        SHA256

        759dab356c5e2e9400f0ae6b10e5f32c54fc16548c4050658b62fa651f5a6ccf

        SHA512

        377d62259478426876546dc1ed12a2d6eff430e7d80f2d42e6956199bbdcf486d5a644ac21942974c3b27912e778efb6f94c4e0dba6af61b67c09eaddde4e07d

      • C:\Users\Admin\AppData\Local\Temp\7zE862B55F7\StrixRat V2.0\res\Library\temp\temp\res\drawable-mdpi\abc_ic_star_half_black_48dp.png

        Filesize

        584B

        MD5

        376c6f1d5637cb467bb620fd902b4a27

        SHA1

        5d614a0506c73450cde04bc3fbf6c693030c3b8f

        SHA256

        74d3900f09ca1ebbdfa3bbb9073f05246d0243f18bc4e68a55c8892d59a2c069

        SHA512

        580333f4627a9a0ed372a91f3055b5aede35221fef57355d655f3c097a3943262836536eb4f56ae8c5482466d7e59ec02bb4c4167c48fafc4268e7ed326bae43

      • C:\Users\Admin\AppData\Local\Temp\7zE862B55F7\StrixRat V2.0\res\Library\temp\temp\res\drawable-xxhdpi\abc_ic_star_black_48dp.png

        Filesize

        2KB

        MD5

        29eae18d93b4c03c17084061847b8c2c

        SHA1

        a83dab4a94c32986c7a9070ad18d2eea5f12daf8

        SHA256

        c848eaa2fc0ec3806e08f7edc2d75e795415c8702781a940ad4ead790324b41d

        SHA512

        54b0f0881a67e177b507178e4699e13b504762f475eb1f8a65382e7eb08f2921ea243cc9c591eed6fed253d932287400f45ec203512abaef79b988d9722b4734

      • C:\Users\Admin\AppData\Local\Temp\7zE862B55F7\StrixRat V2.0\res\Library\temp\temp\res\drawable-xxhdpi\abc_ic_star_half_black_48dp.png

        Filesize

        1KB

        MD5

        85c344771b7f80a6bb987638f5873571

        SHA1

        bc424b9942a76d3431ed274d67321c1475a2b9e8

        SHA256

        b7483aa299286619ce26b4bef6a90b9978c2909441ed0f252c85e232c8e0cb1c

        SHA512

        91ddd58461a284d4e109c8d04f7793113a614cb913cb0e7bb6a7e1c89a095523e9fd2b3e8b15b75289eac62ae041c623ee920c87ad61de8d74526192a51a2f0d

      • C:\Users\Admin\AppData\Local\Temp\7zE862B55F7\StrixRat V2.0\res\Library\temp\temp\res\drawable\abc_cab_background_internal_bg.xml

        Filesize

        197B

        MD5

        606a2fcd7788be9cbcda007f795c21fe

        SHA1

        1125e34877b91b6bb00db099b57c19f436a46986

        SHA256

        f84d6346ddbb8d1f59b1bd6c05f3f71f60a08ee411ef2b60e2d5bf265209aa8c

        SHA512

        6283bdbc2061f7a990b44c8268509266e83a0e76da6f1ddd35d0e36ef256f784ba3bb8c6602fd9c4883f750699c23fae79114d99ce0f3a70206b9242f081482c

      • C:\Users\Admin\AppData\Local\Temp\7zE862B55F7\StrixRat V2.0\res\Library\temp\temp\res\layout\brassk73.xml

        Filesize

        268B

        MD5

        43ac91dd9d233c2bb9f95ae715b483bf

        SHA1

        a8c10985edc9900e2cfc838ea0d983a6db4b4987

        SHA256

        674ef66959affa67e487f0fe1be4319de94a17047b8734192e4507bb500a0a48

        SHA512

        1fb75f82a296e09bafac2978202d8d93ac2d3bbd16ac5ef3191ca0a48a041a91ae570e7023d65de43d6d68e5c905c9850661eb296762a18c8014080369fd89cf

      • C:\Users\Admin\AppData\Local\Temp\7zE862B55F7\StrixRat V2.0\res\Library\temp\temp\res\layout\drugt72.xml

        Filesize

        250B

        MD5

        cb42e6f913c1b89f8e0a4c514684ba96

        SHA1

        4e0fdcbd5c7ec4f01dbd6d414ba32b4dfdd2b511

        SHA256

        3ff2888446f5ff230932e1fa791527f32fe6aceaf69474cd1196010d67a8a4ed

        SHA512

        7a0d7bf71a5567623be3e0641530235bf39df579abb5a481e87e22fe2ecead105208a7d161f44d380822ae866ba1c1ee438a1ac82f586f482aea04992da279a7

      • C:\Users\Admin\AppData\Local\Temp\7zE862B55F7\StrixRat V2.0\res\Library\temp\temp\res\values-pt\strings.xml

        Filesize

        2KB

        MD5

        5b304a1a0ede585f224b0b9681d1fc9c

        SHA1

        65250731688bf4ddcd72937a51ab1904d7121207

        SHA256

        2d2e56da203f5bca4f18a65aba45c97324b776445f677794832258cb17fdd4c8

        SHA512

        be5b06885a87304495434cf12273cb2e39be73551eca4e35ce503c3806461a7df1c8da592fff2c22cc07bc7d09dc33ea4087fb750bca14dcffabf6a76598d4bd

      • C:\Users\Admin\AppData\Local\Temp\7zE862B55F7\StrixRat V2.0\res\Users\Client-95a240a05b57ce34\user.info

        Filesize

        26B

        MD5

        164bdeb299ff419507264e53a3689e9b

        SHA1

        142dbe06deb148333565c0c52e8d84bcd354e8f5

        SHA256

        b746265044578e4e32e24292a062134860a2406de0a34c63a41e61c0e48923b2

        SHA512

        9616aafd17a9fd813d5deabd0b1f59fee082db48c9ae976fa31cd8febb3cc518fda14f42b60e89c2e9ad8afea6524de2d42f53583f109a5de5b4111de0dfd59f

      • C:\Users\Admin\AppData\Local\Temp\7zE862B55F7\StrixRat V2.0\res\injects\banks\enterprise.com.anz.shield.html

        Filesize

        527KB

        MD5

        7c20eb0d5341758d4987328cd77afde9

        SHA1

        251019a8865528e1f07140424c854f1e52574b89

        SHA256

        d9114557eb537089372b1f32dbfd50e817790536e079731253c48bbc19569f1f

        SHA512

        fbb1cdc458bd0a42125b115c60817549f5a300cb5f0ecad5ecc25591986f655611f0a10867d758929c79bd8d842be7a3b8013821ad472365887ae5ce656398e2

      • C:\Users\Admin\AppData\Local\Temp\7zE862B55F7\StrixRat V2.0\res\injects\credit_cards\com.imo.android.imoimhd.html

        Filesize

        166KB

        MD5

        9b2e652556b96a7e1c2501cc1e2483d6

        SHA1

        1365829d27ec20b47b1d6f099cef4a5f9fb0c28f

        SHA256

        024937c6885d57b7848cc3c9051ce18a114781ca8322d4545c9c6674fa23d8ed

        SHA512

        2531c093a5e5ae26f6de80c5def0b95f21229c01fa317eb48369ae9ee3f49f42a6c6fbb23c18832ae9100fea13f56a8f61b81d43e8e4427baebed6d45870fea0

      • C:\Users\Admin\AppData\Local\Temp\7zE862B55F7\StrixRat V2.0\res\injects\credit_cards\com.kfc.qatar.html

        Filesize

        475KB

        MD5

        bb0c2f77e1216bbf6f193c7dcee08e50

        SHA1

        a1d2eed0158e75591a67ca68e45cc48cea88c277

        SHA256

        d896bf415d8eeace1edf5490fcff707b60393775d2e91b103c4806f04caae55e

        SHA512

        51b415980f288083884da816233d22e1e2ecac5ca56b9c4f0032875d0507f2a29a81db231d9701053ec742e95cee49fe545948367edbac7877ef7323ac5c2aba

      • C:\Users\Admin\AppData\Local\Temp\7zE862B55F7\StrixRat V2.0\res\libs\u.jar

        Filesize

        3.1MB

        MD5

        d1dedef51b68fc0ae1f94199ab35b894

        SHA1

        1da0c40d1606c91ef3c509a1acc479137cea15cd

        SHA256

        e1299fd6fcf4da527dd53735b56127e8ea922a321128123b9c32d619bba1d835

        SHA512

        6b31ede83c1384d69c819a73ff728b2a94a42f0bfdc837b1b86a4b684fd2a9c66225ef76f6189769639481a1ad47b6bfa5abd47690ba78c580781c456b60eb11

      • C:\Users\Admin\AppData\Local\Temp\McagY.dll

        Filesize

        112KB

        MD5

        2f1a50031dcf5c87d92e8b2491fdcea6

        SHA1

        71e2aaa2d1bb7dbe32a00e1d01d744830ecce08f

        SHA256

        47578a37901c82f66e4dba47acd5c3cab6d09c9911d16f5ad0413275342147ed

        SHA512

        1c66dbe1320c1a84023bdf77686a2a7ab79a3e86ba5a4ea2cda9a37f8a916137d5cfec30b28ceae181355f6f279270465ef63ae90b7e8dcd4c1a8198a7fd36a8

      • C:\Users\Admin\Desktop\StrixRat V2.0\Bunifu_UI_v1.5.3.dll

        Filesize

        516KB

        MD5

        8cd9953ff0283305f3998f6893c7d244

        SHA1

        db906639e1b164bb813e3e94e548a4c5549bd36e

        SHA256

        0a3f02ad6a8f319b352f4ab3222bd57d9699882db065fb344b9828243b1d0015

        SHA512

        3121712026e63ae2c9df423c24511249895e773a5e56f3fd19dff89eefe58042c990afcd7ffba21bf9f181045b9b4d9f439c7e69114f0f9282adbd707558e133

      • C:\Users\Admin\Desktop\StrixRat V2.0\DrakeUI.Framework.dll

        Filesize

        1.6MB

        MD5

        0562b4c97f643306df491a938ae636da

        SHA1

        0807c37b711374ed4814a9518c9e264517de89a0

        SHA256

        70e72477f7fe0018e043ce8fe2228a289459058ee41caecd6f05855898bc5b80

        SHA512

        c969cd274b6bf65a34f1d129b6531616a3485a1f153088609ad2369d380fdec37c3e88a423495912715a26e353dd5498f7f9e73c895e9f3f18fc7d1e65d2ecaf

      • C:\Users\Admin\Desktop\StrixRat V2.0\GeoIPCitys.dll

        Filesize

        191KB

        MD5

        c070f2421851420e832e4f5989a775a2

        SHA1

        d6af3c48ffbe0fa1e0e54860836d3bbf374b8b46

        SHA256

        d54fd6c5903eea49a75d620d4ba232f8effb1863f5f9c974e4ac0a8fb1904131

        SHA512

        75c3edeb4c16d8e82eedc5595b9c3fde4cbd4a3e9deae1967ad513474920a48e4e9275fdc76f44032b1be570a4ece1a6393c4680af8989f67bcdec039d06798e

      • C:\Users\Admin\Desktop\StrixRat V2.0\Guna.UI2.dll

        Filesize

        2.1MB

        MD5

        c97f23b52087cfa97985f784ea83498f

        SHA1

        d364618bec9cd6f8f5d4c24d3cc0f4c1a8e06b89

        SHA256

        e658e8a5616245dbe655e194b59f1bb704aaeafbd0925d6eebbe70555a638cdd

        SHA512

        ecfa83596f99afde9758d1142ff8b510a090cba6f42ba6fda8ca5e0520b658943ad85829a07bf17411e26e58432b74f05356f7eaeb3949a8834faa5de1a4f512

      • C:\Users\Admin\Desktop\StrixRat V2.0\Licence.p12

        Filesize

        40B

        MD5

        db48100820eb12ad9930ee143cfee9b2

        SHA1

        f33170b9a4b8af5e2b08e07e7ba94b9108a77fab

        SHA256

        5b3b93b4edcbf1b7a8beb4b1943189c68c3ef81136eda3bd6191957f1f5b56b8

        SHA512

        bff8ba264219d984fa84d0472a239bfd7dc29433eb5b73eeae122b7d6338ea8fe55c357288bbf9b8a4273fae6e351c1e28011c86baa40e60ce50033cb478eceb

      • C:\Users\Admin\Desktop\StrixRat V2.0\LiveCharts.WinForms.dll

        Filesize

        19KB

        MD5

        76c775d09b24798f6923452e920979b5

        SHA1

        3fe2c79512a0d1153fb07f6640b27106c90d333e

        SHA256

        a5b61c1726304e6b72e09a0f35ddbf52f89a75a4e28e6ed098c8d1df6081b4ad

        SHA512

        eacc093f8ac9401f617df7e07fd68a8a0f1f03aa150283de67ad8c338fcb1520b0f07335547cf533a646ff95f239c92b029f952a706e736bcd9508817c9be0f9

      • C:\Users\Admin\Desktop\StrixRat V2.0\LiveCharts.Wpf.dll

        Filesize

        212KB

        MD5

        e924f79f0b5f3e79c98477d75831813d

        SHA1

        64f71e20e1953b13c771d8a8e63549ad6d64216e

        SHA256

        1bdbb1b5c1a50653e5c26161e9b7c03edc518721a6e10ea180a84049d967106b

        SHA512

        063e9bdbdaf0accb46cef5fdb98b30a97b8a6ba097a80d43a9799ff73e820d1c56d41ca9f71d94497736e3def7fbd0109db4000ab1d9e46cdc96357bf3e15fd1

      • C:\Users\Admin\Desktop\StrixRat V2.0\LiveCharts.dll

        Filesize

        148KB

        MD5

        9642899636959b7fc89bf34a8b998a90

        SHA1

        479a0254d1c9e5565c7d861bb77f54b7eae50c96

        SHA256

        9fcf89837b60f69c1c501e4cfa4d2860887afd0b8f325803367e795a4e3bc9ca

        SHA512

        435dccb57ff3e9d0663770768c866838b19fbaa5b8e79de0ca111d9c73276f016e016d1d268f72cf3435ecac122039764fada952e1a4f68f368b492bb866c9a2

      • C:\Users\Admin\Desktop\StrixRat V2.0\SipaaFramework.dll

        Filesize

        54KB

        MD5

        7ca0f8aff7fc8c357dd26d617fa2d625

        SHA1

        482b3efc1b12f9c8600c74b7218fe3ba5762cc9e

        SHA256

        daacd27b8c89b8f328ac2b2d80fe4646a9df9500e5265d8f743911cad4fd5636

        SHA512

        3927e713682bdfdcf3f8f45b7f4e7171a0fb6af302d4e76cc05fc47ef3d49047ef9fa49c6d577934b03f5b327cc391c49d9fa9e8df942e8e9019641a38b3df89

      • C:\Users\Admin\Desktop\StrixRat V2.0\StrixRat.exe.config

        Filesize

        814B

        MD5

        c7230627c4adcfe94afd6233e2a84c3b

        SHA1

        9060b865b98992ba1dc5f1626cab7d6ffee99695

        SHA256

        6c3a48631a2169cc36c6a248c939ea47cfe6458596fc776d25a41318d29324c0

        SHA512

        d74d26940d636915ad9f88bd7718db35c886fc974495f3318a0f710b0e546c4adff7e8faa4e9eca6ddf6e700b3cf5f1ba1b70c958fb695c830c288395cc65c1d

      • C:\Users\Admin\Desktop\StrixRat V2.0\res\Config\Language.inf

        Filesize

        7B

        MD5

        78463a384a5aa4fad5fa73e2f506ecfc

        SHA1

        649df08a448ee3fa90f3746baaf6b0907df42c91

        SHA256

        ba118bf7fc9c1aedc1edb28a0aa86e0b43b681f222af6616e13c43be87815b06

        SHA512

        5a4acd4a4031752345b08526d089f78613752ab168d089524052e03e1da17df5b01853bcaee4c352a576a4684ed0b8e874e7665a4c19227269c8a6688d7d8660

      • C:\Users\Admin\Desktop\StrixRat V2.0\res\Config\Pass.inf

        Filesize

        24B

        MD5

        21f3e88f7eb449efeec21253b88db4d1

        SHA1

        c8766726b0cb1f4ed2e6a4efc93610cacefc9c9f

        SHA256

        e1a0a2b96246d66b7251da384e90d655aed1516d10351cf59d0c3cf60bc2f8cb

        SHA512

        f391f37641c6a7ff6771ed2277a5bb7d42cc34e7c9ca214480835976384648e123f6acf258e8fc67684d199e60bb5b3b4373f5b7434a37c4a822c01b23ce3b1d

      • C:\Users\Admin\Desktop\StrixRat V2.0\res\GeoIP\Flags\-1-1.ico

        Filesize

        33KB

        MD5

        410e4dba1b3e1acd689425d024f3fd56

        SHA1

        d38fcae133db0cff918dc455acd8ffa437989659

        SHA256

        e10518132ded7ee51739953121f6efe77412aa85bd744ea7b256a5a6da751e44

        SHA512

        cac41002ef9ffe4592a0949ebb3a21b3837645838e623d3a188f7e70b6c82b2253c586a6a9395007849da0ef94d6dc47bcfce9cde554e8b6becdaf21082cf014

      • C:\Users\Admin\Desktop\StrixRat V2.0\res\GeoIP\Flags\-1.ico

        Filesize

        33KB

        MD5

        b87316c1dce24d7271f21b4024f3cf1d

        SHA1

        667ba94f3565991b7e9b6ca5cd2144792d4bd1cf

        SHA256

        71f2935095a97bc1128b3c4ecc0c0f4647527a7337aee5d3476eabbccabf7dd0

        SHA512

        1a73bbed644e4795d1f702f747df8daa4c2d4153a65f73d6e8fee3a2276c62579007100b781b71b0edd73bf71575fc4122c5539d0cce16be81b02fe3c83e2071

      • C:\Users\Admin\Desktop\StrixRat V2.0\res\GeoIP\Flags\AD.ico

        Filesize

        33KB

        MD5

        2cce7e02f2decbdcf648cc249eeabbfc

        SHA1

        4a9cc2ab3162a949d5f559ac2828813da7aaa6d2

        SHA256

        ffd5e4016c4bc247f49ded9d4ac463e7bd9d7f92c9889528f5f3a865dc8234e2

        SHA512

        be3d96046ec50bfd8e4399d1268856d0cc1f541635896ad128d660660294cfd98f79998dfa46849a2e6e5aa3e637626a94a062ab694444b7210f69b3a55d1686

      • C:\Users\Admin\Desktop\StrixRat V2.0\res\GeoIP\Flags\AE.ico

        Filesize

        33KB

        MD5

        5c22046c8b4f37adbd0f41a811238d5e

        SHA1

        e3c49202f86ff0718f169ce4cb82570457891bd3

        SHA256

        0759c987d55b3e2bc78ea1761d451b0b40928865c5b5652ef7b304426bc1dab9

        SHA512

        655c129c7456ce083a9eec235e04b871a16c4226f7cb1aa2ac4b119770b24ac61036950b0a77257af96352318a991037a1b9b5e2925ca84272995dd8135abca8

      • C:\Users\Admin\Desktop\StrixRat V2.0\res\GeoIP\Flags\AF.ico

        Filesize

        33KB

        MD5

        e18c650283441dfbdc3aa46a414f326c

        SHA1

        eda65607858d6b93db9ca4a9f20cac382cb685db

        SHA256

        ecf99e08bf15aca4325c4790ee20ccc674b6f4fc6dbbef0885f36bf8e6e8aa68

        SHA512

        f10cd2a31390bbb06546052214a817153f35ed9b5c5403995267e1e9b4987630c08ddf7db414146211b8cfb4769949cd660060bd2a5c8a51bf5bc381372a6673

      • C:\Users\Admin\Desktop\StrixRat V2.0\res\GeoIP\Flags\AG.ico

        Filesize

        33KB

        MD5

        93f8d14b56bf5f257f87ea438c7a3601

        SHA1

        31b71ace333e016408af2f18290463389206d1c0

        SHA256

        8e36c85a8ba6b92ea906d4dcda412b492449e668fac3b05f5fc512118fa71e5f

        SHA512

        a70adeb933e65ba11b28d11fad9a2eae29a623013f9bd8383afa5c794f214a6820f797f03f1714759bd38356b160b9c1e159dfcecbfa7e95f4ce2b24bfb24cf5

      • C:\Users\Admin\Desktop\StrixRat V2.0\res\GeoIP\Flags\AI.ico

        Filesize

        33KB

        MD5

        2d5ee470e51e769e649109d2721937d3

        SHA1

        89bb18a904dc2857e52cff3a384df50858d5e17c

        SHA256

        08afe88e8a0475e320c6da70ff530ada3a6fb426051a6337a769c14dc37ae316

        SHA512

        d6801a6b238a9779b0b8829f79412c227ed8480ec060e3d1992c9b1024c94a8f1f6ed32097c8a93a6f2600ad68b2ac537fba5f0982a41fef01a832994cc0cc20

      • C:\Users\Admin\Desktop\StrixRat V2.0\res\GeoIP\Flags\AL.ico

        Filesize

        33KB

        MD5

        5dbcdfb9a2f9120ba42006c997e22b42

        SHA1

        01fe537ccabec19b252e07ed6ab557a46a70e6df

        SHA256

        8f726d2132b2b7764936aaffb52ef7b0271abf857949588c36b32fb3c769bcc4

        SHA512

        519b0757a1bba205915aea9f8bb715072420fae126a4917f146c9ea7567fc231d74f93ded8dead86dcffb0fc293de1a4c85a161dd894b490e57806df67cf01da

      • C:\Users\Admin\Desktop\StrixRat V2.0\res\GeoIP\Flags\AM.ico

        Filesize

        33KB

        MD5

        16782d3d013fbdd1277424363dd8a0ad

        SHA1

        c26e1fd52de7ceb24af6f01fb4486d39e1932bfe

        SHA256

        faf3d661a09912ff0c1f6cc92dd8775c3d2be31e9a72fe0962c144d679021d86

        SHA512

        44bda0a5d59f1ead6939a6af13b81ab23b28be44a61e7e736d5e21cbfee813a3a44c5832b16036717f0e18a418dc449b5c3aa1e0f05c4830cb3b64698ce0901a

      • C:\Users\Admin\Desktop\StrixRat V2.0\res\GeoIP\Flags\AN.ico

        Filesize

        33KB

        MD5

        ed05e0515da2b4c11d839493abf8d44b

        SHA1

        8862a2bd75632d916fdd049b31f2155ac7894524

        SHA256

        8f641c948721c9e7e92f28224b8b1beeb27382e5bac8a4014a57537dd7543a8d

        SHA512

        31613012f4ea1da8d1318f69e6e9a4be068e9e490f01ef0e1f880b33f50d715d92d7498ca99223ce81d6656ccc4293a7fbd272939e99dbc21d62176a6c6d9553

      • C:\Users\Admin\Desktop\StrixRat V2.0\res\GeoIP\Flags\AO.ico

        Filesize

        33KB

        MD5

        a5c78266329a1eb0f3e52bc0343783b5

        SHA1

        e0b254e2176f0eab8d2b76213a64c24ba1788675

        SHA256

        550a1b6e2b97febd865cd130b0c0d484cf2fd02b8066ddf6d7290b9cffb35059

        SHA512

        61a7bf67f9019e5f4c653246e1844703619d6421c3625c963862ee9b0b3975b26ce2f785c9b3cc79e77181c098f0e3d60c9f0e21203928117c6cd45f104af36f

      • C:\Users\Admin\Desktop\StrixRat V2.0\res\GeoIP\Flags\AQ.ico

        Filesize

        33KB

        MD5

        be6fa7ab4980735841141d4d3f642a4a

        SHA1

        c6d03cda7f73a959a3d20d0e3897595fbe2915e9

        SHA256

        3439ebcdd8e7a614f157f58d7f77d190aac7fe514129a01024a8b68b7008fbb2

        SHA512

        fbc116df306de7a04f43cb2becfecbbaf103d6b252336e0bd37f006506140ceb14f114cdf62e203bc12f78c25906066385eb6caa67f694d8526b341bcf3462f2

      • C:\Users\Admin\Desktop\StrixRat V2.0\res\GeoIP\Flags\AR.ico

        Filesize

        33KB

        MD5

        bb4f489b2ae1f6601513296357fb478b

        SHA1

        b8337772e2e17d48412f44373ea8a821b85e9c54

        SHA256

        af2f591584f6c59da15fd42e5175dc136844442e1c755fac047b0efae3956c50

        SHA512

        547e0753a1ac4058ec609ddd2d6ce54b50cc47177ee319f5bcc82eca9e231d01d74b7c2d02de90557c08224bed962c74f8c4079a1292153cbff32db234ddf6a6

      • C:\Users\Admin\Desktop\StrixRat V2.0\res\GeoIP\Flags\AS.ico

        Filesize

        33KB

        MD5

        caba1e66c954bc8d784efe2a3c02d808

        SHA1

        ef1d5ba4735c99b55648503513d9ae7393a3a6d6

        SHA256

        4946c58e14318696ea03cf9bcb5d8a7334273c2f9e30173a3c7ae0bb7ee70bc4

        SHA512

        430806d048e383411e36a8e3777a27b7efc1819cca50c7d7eeba662d32351a366d3cc0b892f819b6a96db8281c5e249d3faef13e8a4ec3bef75e67b9567bd466

      • C:\Users\Admin\Desktop\StrixRat V2.0\res\GeoIP\Flags\AT.ico

        Filesize

        33KB

        MD5

        8effa2f5bbcecf6415b04f9408c0a65d

        SHA1

        3f3249fe921c1d4767b76b0c3a720cba0262b565

        SHA256

        236c59500b9bd83212375ca7514c0d62dc088203ed269e9cd55ca6349adbc8f0

        SHA512

        3f8a1f0683207ed616819a0e42b18e5b02eab0300fcf6eac1c399f0e5475f45d62e0bdebfe0055d411d529649938623acfd4b3b02fe80fc9da6a0492dcd31822

      • C:\Users\Admin\Desktop\StrixRat V2.0\res\GeoIP\Flags\AU.ico

        Filesize

        33KB

        MD5

        ae8189b2c04d783a2f68f0204f1baeab

        SHA1

        e5709598ed08427a1dd83e1d994330bba1b1b091

        SHA256

        047f9bd82ca7e2685c1dca4c065209977b5e8c32f78ee821bcc7aba12decb044

        SHA512

        ef1dd8330cf3cfa9840a5902e13c669e6de911ca9f383067506e2c106f05021aa79df60e2a867259bbd1dd056b9367d5814e9bcbafb242d718fa7fe0fe664248

      • C:\Users\Admin\Desktop\StrixRat V2.0\res\GeoIP\Flags\AW.ico

        Filesize

        33KB

        MD5

        49d969f363a153b7e1cb4dc2cb742238

        SHA1

        2a8fbfd37be58690dc2e0ca2b3ce04c2d15d6eec

        SHA256

        f0d730a0d8ce85f049a6d8a52733c506a8cf48584b18838f3d677b09d9c09b52

        SHA512

        97f17ab20ee96ae4e71e31c7864c509ef0b714215606413c801b3608770415ab63d6d5be0980af7231e4c2e270407fd273c36e0e47d524e59126b933fafa4eac

      • C:\Users\Admin\Desktop\StrixRat V2.0\res\GeoIP\Flags\AX.ico

        Filesize

        33KB

        MD5

        19169001a889e72fef769900ca7a8b27

        SHA1

        e17d9c371cc34d19f05c46d81e06f7ae2159dc7f

        SHA256

        5ac8c61a8ad2d7ecc3e76927fd6d52b4f279c4d3a92dd32715395581c4615423

        SHA512

        4c8247ab0f37cafa90ae34aa865af45b6b388fdfa8ab96935d2ae2064c620240dbb8f93c9958844a34fbd249422a9b5751639179697bab44aabda8afc18b0454

      • C:\Users\Admin\Desktop\StrixRat V2.0\res\GeoIP\Flags\AZ.ico

        Filesize

        33KB

        MD5

        3abcf274a070469b7fd5cc1f60408c9d

        SHA1

        a2fbdbc0028f398a90b351fe5e3a2e4b31153b07

        SHA256

        d3cc5eeabeae7f54a8c5600b5c2354b355492634031e32e8ba981806b0494b61

        SHA512

        14be128eaa0b49b7ad07ad2230732e923a30c204faae1c3afac766088836845fc385a99ef50938f6261456e0e45afcd17c0661345ab72cca8b66bd710eb3035f

      • C:\Users\Admin\Desktop\StrixRat V2.0\res\GeoIP\Flags\BA.ico

        Filesize

        33KB

        MD5

        a603875f8aecceb0d62c9c346f250e62

        SHA1

        44b58245d17d8d205e6bc2015965b3ac9374245e

        SHA256

        b586dd987bd326d24ad3edddd1f649d2fc49eaf96028e62e6e14208591a31a9b

        SHA512

        62c218f9e7e30c056c02b0e9e35b39fa9b66faced7fa8c3a14e9636450d271da04aa5f04a627452be03d0df062b38db0bbeb4fcdedb0d7d820d0bb186cb38953

      • C:\Users\Admin\Desktop\StrixRat V2.0\res\GeoIP\Flags\BB.ico

        Filesize

        33KB

        MD5

        a272b143736710d954a021e7b5b1fe41

        SHA1

        abf3a358da02a0d9786a022a1367d9bf805ae060

        SHA256

        f679b5b2dfe2c980b55b713a025936c10260db10254391c5b66dcec51dd97705

        SHA512

        9290ed552de75f080719d3e6f4954234b48cb1bf87952bf62d1799d64c0d0a2419fe6776d5a84f691f877a6e7ccb176824e7dd00f5ceec7da32458faf1ef6485

      • C:\Users\Admin\Desktop\StrixRat V2.0\res\GeoIP\Flags\BD.ico

        Filesize

        33KB

        MD5

        7bb2410b8a58504b0645e9e869cb903e

        SHA1

        a1d49a900e2367817575d581c34a3f4b5282db25

        SHA256

        f8d767b5e74cde08d614d64bc51f4d9db90dc056dba1c38ad8b21aa6c598a286

        SHA512

        a629b6e3a5fc4cc0499e18139260a7c67c629d76c8264ffd3d99c62154354b50bcc5d73b0475891cf38b90809de996648c211a9c2df0aa4e885e536fe4d3f825

      • C:\Users\Admin\Desktop\StrixRat V2.0\res\GeoIP\Flags\BE.ico

        Filesize

        33KB

        MD5

        f7ed63c5a74feb0ee727cab8d64e2ba2

        SHA1

        d06d03cc1f832a30c3b5ae51f164291498ff4df4

        SHA256

        bd0eefab4e51b0beae22d4557f8c43e2908c39b23158900d9c3d38d4a3c27b2d

        SHA512

        01bb6f850b6b213e365b55861f6a92442c15931db6989f6be03a009a97151abf066eb1298fbd6d130a7ff47970097ecda5855acd2f15fb750f1e5f6916b06e48

      • C:\Users\Admin\Desktop\StrixRat V2.0\res\GeoIP\Flags\BF.ico

        Filesize

        33KB

        MD5

        afe862286a0c17305ca72a54bacc21ca

        SHA1

        e220c5912d11960c8e9ee38f44dca1361b729dd3

        SHA256

        5f865103ca695247ab7ea7e02a1942ef01cd65120973e17fa3fcc3e59f9f7eb9

        SHA512

        33905016ee79a2213a5dd03d553e0245058422d45861f4587f4b3aa2e9562686c209fd1e76575d7614a52388f3308907bbdf867223e15a7fe62d3650b130ce68

      • C:\Users\Admin\Desktop\StrixRat V2.0\res\GeoIP\Flags\BG.ico

        Filesize

        33KB

        MD5

        8237c4778058a9bab26f406b8f06dca2

        SHA1

        4bc2b85679ea7e634af68b4e31135d3205ae01c6

        SHA256

        426c8b630bdc5916c5a687450e90a265d18a1042111c7f26a5a7d85d143044ad

        SHA512

        b64ec153ba921e2f91146ec1461a75b59fb8e71ddb27dc306144a9cc1aa271e6a61096210f4a3a8e56b45ced2f16343cf61a8bc594b52ccb1d9a0d5b312456ed

      • C:\Users\Admin\Desktop\StrixRat V2.0\res\GeoIP\Flags\BH.ico

        Filesize

        33KB

        MD5

        75c68788c23a5adf9efe2c1b70526710

        SHA1

        3750a765118359dd026580d071da6bd3ecd677f3

        SHA256

        2525fc71eb284013f3add2f13578363e8030ed41fec3a7fd599a96b2a8ba0d70

        SHA512

        c2a8ee014d1c9ed3ff09d6781c5062fd9aa2dd233c911358eefc2f27d24cee05883086420b2ecab27138a5f6d0143e045ea2b80a221b30b28eb02ecfe3b6c0d3

      • C:\Users\Admin\Desktop\StrixRat V2.0\res\GeoIP\Flags\BI.ico

        Filesize

        33KB

        MD5

        f44e4ff32292c899f1dfc0d40946c945

        SHA1

        3e1c7d81166d64dcd6052a7fbe72dd6a56753682

        SHA256

        84145ca9e4595bdd4838af891ca65f3b88f4ce830f867b6d4f821780152b9c16

        SHA512

        aad82aee512ee6768ab98e83aeda9b6954d792e81273594d4c2f46183fc0f7df8c0fc4a8035a43c8989b61690dbebea8e286461b01eeafa3398ecbe61750fccb

      • C:\Users\Admin\Desktop\StrixRat V2.0\res\GeoIP\Flags\BJ.ico

        Filesize

        33KB

        MD5

        994401f509db6b74c3ba205814ff1f02

        SHA1

        3334f65250c7ba7cbee20065bf4d52becdbd392d

        SHA256

        569c37c33bf5fe84cf1766c26c531be1398e80585551cd065dfb8dd62a57b608

        SHA512

        cbdf647eebcbbab5df5b8b68ffbb900534f2d41ec2f4d74e53e53eabbd2219caf83dce0cdbb53cd9c126ce1f88aa667439bce5a5a6ae5e6eb07acc8c8740d1d2

      • C:\Users\Admin\Desktop\StrixRat V2.0\res\GeoIP\Flags\BL.ico

        Filesize

        33KB

        MD5

        a5b94c9bcb4d88d9db4d0a568f80b079

        SHA1

        80167cfe16e20d0eda73b7b4627ce676911814be

        SHA256

        8165efe84da8f10193cadb266016cfb6ca87724614d00c70495a7b9afc172caf

        SHA512

        5a186a33e52870dbe2e58c889e913315add63486dd184b216cc3a8b2317169e3ffea8eaaf95084eef6ea04a0f3a791d6012bce6b0118143aa514820050577c54

      • C:\Users\Admin\Desktop\StrixRat V2.0\res\GeoIP\Flags\BM.ico

        Filesize

        33KB

        MD5

        d3be823145f7a4b0424beecfff5c9e75

        SHA1

        0d279742a4c5468d58f2d141b5e3922699b165b7

        SHA256

        7f33f4d7cdbe5ac4745917badc34bb93d38a8e5abff6bcdc0c76d3171baf275a

        SHA512

        6f84de202333e036d1aa772a82448e3e0adb2b453d3f93eab5ed745b4399b74e07abd3a533862a68b57dcd1982941698545e239a6510e0f59a51a442adbd7009

      • C:\Users\Admin\Desktop\StrixRat V2.0\res\GeoIP\Flags\BN.ico

        Filesize

        33KB

        MD5

        4af382e98b18f91caac79ae5240ccc40

        SHA1

        3158bae6579aa85151b67ab08687b64467c19e4b

        SHA256

        9cb1449764b3abaae85b2edb0e39afb9776e4c662591f3b241b741a502bb777b

        SHA512

        0a6daa2b22ee49819d0cda58cfe74343638c62041ef342b08918edd4e1e9e4e90ce2e72a09773b2d9a8859310d237cb8f765fa9658cdfa4adaf1b9e40bb5880a

      • C:\Users\Admin\Desktop\StrixRat V2.0\res\GeoIP\Flags\BO.ico

        Filesize

        33KB

        MD5

        ac44c7d4d6d1725f969c9aea026bbff1

        SHA1

        7796cd8f72ca40280d819cf4512a534eacf35b68

        SHA256

        a74d0a96d71485df49614b77a3a232af0c0984443cf2a3efd30d2a9b367271f6

        SHA512

        1a68ed03fd0bb79460fdb2c6a0c3677db9055f17a14da79eb3388fa3d4a61d17984ea3d0b7d69c9bc5b6a39be955fba62962993122d8df860355125b2e759242

      • C:\Users\Admin\Desktop\StrixRat V2.0\res\GeoIP\Flags\BR.ico

        Filesize

        33KB

        MD5

        b44d5f3b7562b900379302a2f8abe2e7

        SHA1

        93f2167eeb28510497a4cf6e731aadc1deb783cb

        SHA256

        29be53093407af0aa165535b196cd3233e19903e7d07c7487c3590feaf3806dd

        SHA512

        6654a62d640d0b20be490d05a871abe2cae150e3ebd9119c656a8e62deb8a820a417c06fad5fcfbbf5d942c73c9042a281affbd9c28240d85d17ffd1af709ef8

      • C:\Users\Admin\Desktop\StrixRat V2.0\res\GeoIP\Flags\BS.ico

        Filesize

        33KB

        MD5

        8e52a4c31bcf00be00030a8e22e0642c

        SHA1

        a6743ce24e9ccc60064ea3629d54593cda7309b3

        SHA256

        2f2cf7125492eb037d8c5bfa15c1584ad8b55047f46e5052b142674ce10e95c4

        SHA512

        c5fe2072d1c029f359f79e07835e528f5527ccffef1d85483760eea8556b842449dd5babdad3b6f3ced1fe5a6104bdb4d9a688630bd9e26c8e533bdacf6096dc

      • C:\Users\Admin\Desktop\StrixRat V2.0\res\GeoIP\Flags\BT.ico

        Filesize

        33KB

        MD5

        6354a3e9500fd25c6b16d06ee185b4df

        SHA1

        cfc3cdf3c1dffc5b8e00751cd25ec2e25d4ebbbe

        SHA256

        ea70f8f17623daf8128eeee0fd9b91d942d928e5b20da5e1bbc7a5d7a4be5e1f

        SHA512

        941b4b4b61f6475dd10df924f6580fc0b351d6bcf3dc75e8a9ed6ad60d57931379483457bf5d3c998e8fcae23ad110160fd73cb1e876119a702c0aceefe3b486

      • C:\Users\Admin\Desktop\StrixRat V2.0\res\GeoIP\Flags\BW.ico

        Filesize

        33KB

        MD5

        52744003db72b685d11c884f2f9e56b6

        SHA1

        310b6932dc8864a8a6b2811badfac88288609a79

        SHA256

        9c1c1186d19dd5c439351fcb756df877c4ea351dbf4aac1de226b98b3053ff01

        SHA512

        6bfa94f9e8905498fd503b55d67d87ad2778799b04c9129c5f15de45d3fbf75d3460b5b855f048d169e345766e4457b25e29b03abeff043ef68b4669822c6d8f

      • C:\Users\Admin\Desktop\StrixRat V2.0\res\GeoIP\Flags\BY.ico

        Filesize

        33KB

        MD5

        4c2fd28b7d3e934b6979550174bf4f97

        SHA1

        5177886a85094d8446ff457e2956481a68b066db

        SHA256

        de9fb648d544aee8166232826f3ddf7973d957eedb70ce5100df5a969d7a6cc7

        SHA512

        fdafcec7528305f0aa03d83ec5888c19bbea333b116a142ade6fb53d2812f4cfe5735ffb2ba2158389751c04b3e172fd196648e9fc8e95892125fdac1183a976

      • C:\Users\Admin\Desktop\StrixRat V2.0\res\GeoIP\Flags\BZ.ico

        Filesize

        33KB

        MD5

        79c5d3202341bbd141ccd6543fe01983

        SHA1

        ea4b1accd5025dce621752bd23a5143b1128873e

        SHA256

        627bbd8aefb32eb4bd11c2519ad35427d5627bdbd54b68119827990ef66b4180

        SHA512

        790390d2e6bd15f35f7f414504a01f206b6114837388b8897cf74bb0191598b4dbe01f1a99a39e0f3a535bedc714d77b63dfbe1e368f744e04acfe93f938ae25

      • C:\Users\Admin\Desktop\StrixRat V2.0\res\GeoIP\Flags\CA.ico

        Filesize

        33KB

        MD5

        a28d60062ceb07e296f5c4ddd6e76fed

        SHA1

        e9306422c690eb6e773b9ce306c6e5eb545f6e1c

        SHA256

        642b7b575255c44fa96167b1268e69f2fa72e76d62aa8f15768eeebdd45d11d2

        SHA512

        73dfb8a1ca49d5b8e9a739fc36dc68f5ee7a66be7b851f38941c6a7b55af64187b3390d1e8962b850e6d3f3755b9c03c5103ae62cb0e29855b2cc7cc49b3105f

      • C:\Users\Admin\Desktop\StrixRat V2.0\res\GeoIP\Flags\CC.ico

        Filesize

        33KB

        MD5

        549077dbd6355bdf02cf9ae94cd90d31

        SHA1

        447cee9c147f048529a2f654665e48d390d4ca61

        SHA256

        4c13e537ae62cfd9e6bf1690ad6fd7a0444ccdbebf9f29478c0238ba60c4bc58

        SHA512

        720a6f26cb64b4ba56c931370ae74ce0ec83756a1af0a33af2b11ee725ce4eea2945972283b49a908aec9aa42eb7f357e7eb7030465a11d4d63b5802ca6442d9

      • C:\Users\Admin\Desktop\StrixRat V2.0\res\GeoIP\Flags\CD.ico

        Filesize

        33KB

        MD5

        ce3a6c35e3c3c2e5a283e903378b9c47

        SHA1

        df642801fcfb8c444dd6268a3169cf0d5e3507a1

        SHA256

        50f6609606763761767bbbcaa7f845644a15612fd7a9228c384729691a14b350

        SHA512

        22c2eedd1ea6333e0475202ca1835372efe4312480996a02da8067a15cbf90384e455c424b371280fb87494d30a87d580eac7e5bdb42debd522553feb02f53d1

      • C:\Users\Admin\Desktop\StrixRat V2.0\res\GeoIP\Flags\CF.ico

        Filesize

        33KB

        MD5

        6431050f008d7af7d9d445a16959b3e0

        SHA1

        8fc15ba33e4f1e5332c8485da830bf788da575b0

        SHA256

        29218dbf97371f2d0282388a8c1f18df0cd59cff572e9a1d3833fa30dfca1210

        SHA512

        c9d9ed66847f2bff165d3ee13befaee58492950a3c326b94780803daf1d5792e5ebc79dc354b47531be700d703c207b4a7ea06b4ad7d60eb0e6a5eefd02dc122

      • C:\Users\Admin\Desktop\StrixRat V2.0\res\GeoIP\Flags\CG.ico

        Filesize

        33KB

        MD5

        713242b9378bcc70a07f166be42e0283

        SHA1

        d76fe8c0f13867ee0cd9aa824f9611ffb384e5b5

        SHA256

        8caaf67c31afba8703fbfb04a416e54720a7f015897daa733bd9d89ab55e7c63

        SHA512

        f13eddf4c656f982a2c98881cc1df769b67b0764242d85e3c76b355a6dc80e86ee6fdf6ce2956fe4d90f58402de605ef0809080ec28d365c64ca662f33d93bdc

      • C:\Users\Admin\Desktop\StrixRat V2.0\res\GeoIP\Flags\CH.ico

        Filesize

        33KB

        MD5

        02bc13498f6d75a299da5afe6e14208c

        SHA1

        1306eb72cc25d7f6f1ed27374d06f48a034384b8

        SHA256

        c712b3b71aab3fd48b7d0256430b3177106a7bf5ec93d1ca39a912d6f5f9d877

        SHA512

        f71e7b005c1f6e751fc5a65e7c27574c5df548c3af35dc14995413f8bb8368ba515e5f55f0574064e2ee724b96352d3aba69237362383381eb7d9cb325051528

      • C:\Users\Admin\Desktop\StrixRat V2.0\res\GeoIP\Flags\CI.ico

        Filesize

        33KB

        MD5

        08ebf16a5070b3dd3f99b5b595f8014f

        SHA1

        5ca1eb5e1392161b7bef86245be061107fdb6db0

        SHA256

        b682dbdd522f2b9e3edb7e2bc80fb82b973f6c913bf2c5992893d26a7b777e6c

        SHA512

        f1f5a4f6eacc6c773a8d1ff2631ba2505603eda68ef289b91ba9a872d6872e8581749dd2bf34ca56abeae20691bf01917af45496fa717c03a2999cd2e88668ba

      • C:\Users\Admin\Desktop\StrixRat V2.0\res\GeoIP\Flags\CK.ico

        Filesize

        33KB

        MD5

        e298c18a1e686067dbdaa880f0d6d8aa

        SHA1

        617f5422777ff7de11581c117d917019c93188ee

        SHA256

        e17e1e1611e1de28707872a2287a45d108a48c9f6fd00574def682dd2fad0beb

        SHA512

        b72b67fe51e41cfc98d6d31618c19f618b9833f84ac54cda151519b025f5685b258c1393bcc190ae0b6cf5be70cfb71b6d27567807f5ae101e034bf1f57109b0

      • C:\Users\Admin\Desktop\StrixRat V2.0\res\GeoIP\Flags\CL.ico

        Filesize

        33KB

        MD5

        69076ebd2104d4feaacc90c116be22d4

        SHA1

        5bcda0bc0a3ce338cfdd9211f0c022acb1fa15dd

        SHA256

        ca76382bc3d8fc37de4f5b957a50e7f4c85afbdf990207c698dd8a28cbfba700

        SHA512

        f6405e1ce4664b94dc55b7f9e2aa9ac1c9f31249bd2dc455b7bb6c904fd69266bb2c7d00870e08b814a0fc4981b5faa13d724fe5edba73b8ccc75567322fe59b

      • C:\Users\Admin\Desktop\StrixRat V2.0\res\GeoIP\GeoIP.dat

        Filesize

        1.1MB

        MD5

        2fbec46d430f57befcde85b86c68b36e

        SHA1

        3ff9829e3242deb69a7fde0832b7d9345b925afc

        SHA256

        681ede512fe7ac21e976c754bfc1e1a75a9e02c3d931ce6849cfaa9d4080338a

        SHA512

        42036af6f57e446fec194ce71fa634dee9f4c77342f64a867fca8730d76349190960a7e7a5967ea59c250ca1b220d4845b4911dd63ee870f5620d9eb513b91d6

      • C:\Users\Admin\Desktop\StrixRat V2.0\res\GeoIP\GeoIPCity.dat

        Filesize

        25.6MB

        MD5

        fab3cc04a19ffdf90d775e27967a7c25

        SHA1

        723c1635338bec7c1c876769618789268b8faad2

        SHA256

        bf41a0a700e3b35415609d090b15c5355e5cf4ca703ab119626b2d450997c608

        SHA512

        fe013386ff799cda195222341ee601d7b8b3c5c8abacf3c80e3fa03af52ac848f8a79a7dd87d8831d5a366243343f1025f704f49d858da4b02235968f834a9e6

      • memory/2668-12303-0x00007FFC641B3000-0x00007FFC641B5000-memory.dmp

        Filesize

        8KB

      • memory/2668-12334-0x00007FFC641B0000-0x00007FFC64C72000-memory.dmp

        Filesize

        10.8MB

      • memory/2668-12332-0x0000023D42250000-0x0000023D42286000-memory.dmp

        Filesize

        216KB

      • memory/2668-12330-0x00007FFC641B3000-0x00007FFC641B5000-memory.dmp

        Filesize

        8KB

      • memory/2668-12328-0x0000023D3E940000-0x0000023D3E9C6000-memory.dmp

        Filesize

        536KB

      • memory/2668-12324-0x0000023D3E780000-0x0000023D3E7AC000-memory.dmp

        Filesize

        176KB

      • memory/2668-12326-0x0000023D3E7F0000-0x0000023D3E82C000-memory.dmp

        Filesize

        240KB

      • memory/2668-12322-0x0000023D3E760000-0x0000023D3E77C000-memory.dmp

        Filesize

        112KB

      • memory/2668-12321-0x0000023D3DAD0000-0x0000023D3DADC000-memory.dmp

        Filesize

        48KB

      • memory/2668-12319-0x0000023D3DB10000-0x0000023D3DB4C000-memory.dmp

        Filesize

        240KB

      • memory/2668-12317-0x0000023D21F80000-0x0000023D21F94000-memory.dmp

        Filesize

        80KB

      • memory/2668-12315-0x0000023D3B6F0000-0x0000023D3B902000-memory.dmp

        Filesize

        2.1MB

      • memory/2668-12313-0x00007FFC641B0000-0x00007FFC64C72000-memory.dmp

        Filesize

        10.8MB

      • memory/2668-12312-0x0000023D3B320000-0x0000023D3B4C6000-memory.dmp

        Filesize

        1.6MB

      • memory/2668-12310-0x0000023D20730000-0x0000023D20742000-memory.dmp

        Filesize

        72KB

      • memory/2668-12304-0x0000023D174D0000-0x0000023D184D0000-memory.dmp

        Filesize

        16.0MB