General
- Target Halkbank Ekstre.jar
- Size 60KB
- Sample250712-xtdhdafn7x
- SHA256 daf23a217b188f63657b051fda8bbd6eb341172b9519b9b5bff1a60eb4dda5a1
- MD5 a7220153248510d6c93a29225a4224ef
- SHA1 5ad86057a05aa648cc2aa388992143a22f023da9
- SHA512 7d0e20a8da929b587ef5e377a9ea948945f64d5d9b422f36326126d694068511aba9929f936bf98f2c6cfdf4919cc176e9bc830ddb7eedb9b3d4ae1520b0e0ba
- SSDEEP 1536:ZzwZZCpN66w+tFG1XMDy9qvBNuXm5/9G3Yq3+ZfSOSL:VieTw+21XMDbvBf5/9GEdSx
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Malware Config
Targets
-
- Target Halkbank Ekstre.jar
- Size 60KB
- SHA256 daf23a217b188f63657b051fda8bbd6eb341172b9519b9b5bff1a60eb4dda5a1
- MD5 a7220153248510d6c93a29225a4224ef
- SHA1 5ad86057a05aa648cc2aa388992143a22f023da9
- SHA512 7d0e20a8da929b587ef5e377a9ea948945f64d5d9b422f36326126d694068511aba9929f936bf98f2c6cfdf4919cc176e9bc830ddb7eedb9b3d4ae1520b0e0ba
- SSDEEP 1536:ZzwZZCpN66w+tFG1XMDy9qvBNuXm5/9G3Yq3+ZfSOSL:VieTw+21XMDbvBf5/9GEdSx
- MD5 SHA1 SHA512 SSDEEP
-
Strrat family
-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.