General
- Target opzkjztnty.zip
- Size 164KB
- Sample231024-mg376aea52
- SHA256 27f16f3e0ae8499d98a9b7537ff2619d54bc8a7d8350f3f547521eb5b39bdb6b
- MD5 250d09e650c301b53d00a703f39354d1
- SHA1 aeb977370e8e40c7323ecebe262d153ea59bd7c6
- SHA512 26130963ba22be6a76bba8d9d6345bf2cd3098f1ba77aa623deed44dd8552268e37b27c50d0fa2727a98a95c2abcdc4fab82838c4e28b9d3cf9987e0b0c5c352
- SSDEEP 3072:Yw81M/EYAmf2Es926lSu9TFrkVYOms/0dOM4rgx+Feg0xwLxY5cE:YzIfNTu9TiVYOme0PQFAxw9KP
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
opzkjztnty.jar
Resource
win7-20231020-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
opzkjztnty.jar
Resource
win10v2004-20231023-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
strrat
C2
-
judhglaq.gleeze.com:6725
-
194.180.49.39:6725
Attributes
-
license_id
8167-P12C-Y1NJ-KGF0-AT9Z
-
plugins_url
http://jbfrost.live/strigoi/server/?hwid=1&lid=m&ht=5
-
scheduled_task
true
-
secondary_startup
true
-
startup
true
Targets
-
- Target opzkjztnty.zip
- Size 164KB
- SHA256 27f16f3e0ae8499d98a9b7537ff2619d54bc8a7d8350f3f547521eb5b39bdb6b
- MD5 250d09e650c301b53d00a703f39354d1
- SHA1 aeb977370e8e40c7323ecebe262d153ea59bd7c6
- SHA512 26130963ba22be6a76bba8d9d6345bf2cd3098f1ba77aa623deed44dd8552268e37b27c50d0fa2727a98a95c2abcdc4fab82838c4e28b9d3cf9987e0b0c5c352
- SSDEEP 3072:Yw81M/EYAmf2Es926lSu9TFrkVYOms/0dOM4rgx+Feg0xwLxY5cE:YzIfNTu9TiVYOme0PQFAxw9KP
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Modifies file permissions