Overview

overview

10

Static

static

1

a05e19a327...per.js

windows10-2004-x64

10

a05e19a327...per.js

windows11-21h2-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    a05e19a327fb6c9208abf7866ef09c5efffabc04a80456b49c81c790a40880c5_zipper.js
  • Size 186KB
  • Sample260411-qrxpxab191
  • SHA256 f26d0c5b188e5c42ea71d700d1f38fc1c0997944e614d535dba4d31133603a9f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
strratexecutionpersistenceransomwarestealertrojan

Malware Config

Targets

    • Target
      a05e19a327fb6c9208abf7866ef09c5efffabc04a80456b49c81c790a40880c5_zipper.js
    • Size 186KB
    • SHA256 f26d0c5b188e5c42ea71d700d1f38fc1c0997944e614d535dba4d31133603a9f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    executionstrratpersistenceransomwarestealertrojan

    • STRRAT

      STRRAT is a remote access tool than can steal credentials and log keystrokes.

      trojanstealerstrrat

    • Strrat family

      strrat

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks