Overview

overview

10

Static

static

1

Remittance_pdf.jar

windows7-x64

1

Remittance_pdf.jar

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Remittance_pdf.jar

  • Size

    432KB

  • Sample

    240615-jldxaaweqp

  • MD5

    8ec9eb589dc78c7e0ad9c8155027a133

  • SHA1

    f4cc5469b945ce8f4c5d266375c28f97636479ff

  • SHA256

    97e67ac77d80d26af4897acff2a3f6075e0efe7997a67d8194e799006ed5efc9

  • SHA512

    0044e07c000634a043aae2b9f42df7f9f1d0dba2462207663c7f0e9e322cb732b19ab0e7f1fdd653b587c0ce19f5efc93fb7e630ff3477e5e98bcb652f723a1c

  • SSDEEP

    6144:VwhA+Jd+Z+qYYQJXELxEG1E3RjdZO8uk/VSADdEwyOygQc8axuk9:VwC+Jd+Q1hENLE3JdU8fsg5XQc8axf9

Score
10/10
strratdiscoverystealertrojan

Malware Config

Targets

    • Target

      Remittance_pdf.jar

    • Size

      432KB

    • MD5

      8ec9eb589dc78c7e0ad9c8155027a133

    • SHA1

      f4cc5469b945ce8f4c5d266375c28f97636479ff

    • SHA256

      97e67ac77d80d26af4897acff2a3f6075e0efe7997a67d8194e799006ed5efc9

    • SHA512

      0044e07c000634a043aae2b9f42df7f9f1d0dba2462207663c7f0e9e322cb732b19ab0e7f1fdd653b587c0ce19f5efc93fb7e630ff3477e5e98bcb652f723a1c

    • SSDEEP

      6144:VwhA+Jd+Z+qYYQJXELxEG1E3RjdZO8uk/VSADdEwyOygQc8axuk9:VwC+Jd+Q1hENLE3JdU8fsg5XQc8axf9

    Score
    10/10
    strratdiscoverystealertrojan

    • STRRAT

      STRRAT is a remote access tool than can steal credentials and log keystrokes.

      trojanstealerstrrat

    • Drops startup file

    • Loads dropped DLL

    • Modifies file permissions

      discovery
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Scheduled Task/Job

1
T1053

Persistence

Scheduled Task/Job

1
T1053

Privilege Escalation

Scheduled Task/Job

1
T1053

Defense Evasion

File and Directory Permissions Modification

1
T1222

Credential Access

Discovery

Query Registry

1
T1012

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks