MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 721a280cd4f1a0d41ae282ad97e93f2d0a6ee6fa3d153d70ac3594a83f2e5a09. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


STRRAT


Vendor detections: 4


Intelligence 4 IOCs 1 YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 721a280cd4f1a0d41ae282ad97e93f2d0a6ee6fa3d153d70ac3594a83f2e5a09
SHA3-384 hash: 286025ea38f43746c54485c67b65c66f6d5d371256edc7abdd5c8c14ce38e881c099b701f7445115b7fd87792feb7720
SHA1 hash: c9d09fbd790bf414ff2407c30a275e1e9b3bca67
MD5 hash: 0efe247dd11062b473b2e1f847867992
humanhash: butter-robin-butter-uniform
File name:Curriculum Vitae Sofia Diaz.js
Download: download sample
Signature STRRAT
Create hunting rule
File size:2'420'274 bytes
First seen:2022-02-07 07:31:34 UTC
Last seen:Never
File type:Java Script (JS) js
MIME type:text/plain
ssdeep 24576:OMC5N0FGgAcmW06LrZYzgspDLa2BIcdqFfQ5K5HZQu7GeDX6JxRjVXt+SeoBqzyb:/C7MGWJjYfaoq5Hupp/1b+S5qeOPGv
TLSH T1F9B502118AC82F69CFBC5A1990FE161E93F04A8A502675CEFB37BD07AFEB94441071D9
Reporter abuse_ch
Tags:js STRRAT


Avatar
abuse_ch
STRRAT C2:
15.235.10.108:3333

Indicators Of Compromise (IOCs)

Below is a list of indicators of compromise (IOCs) associated with this malware samples.

IOCThreatFox Reference
15.235.10.108:3333 https://threatfox.abuse.ch/ioc/381652/

Intelligence

File Origin
# of uploads :
1
# of downloads :
283
Origin country :
n/a
Vendor Threat Intelligence
Verdict:
Suspicious
Threat level:
  5/10
Confidence:
100%
Link:
https://www.filescan.io/uploads/6200caf731f00fad9db353d5/reports/e8efe3bb-ed4b-4849-b869-b664e901ba76/overview
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/721a280cd4f1a0d41ae282ad97e93f2d0a6ee6fa3d153d70ac3594a83f2e5a09/
Threat name:
Script.Dropper.Heuristic
Create hunting rule
Status:
Malicious
First seen:
2022-02-07 07:32:14 UTC
File Type:
Text (JavaScript)
AV detection:
2 of 43 (4.65%)
Threat level:
  2/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=oincqdgu6gqnigxcqkwzp2j7fufg5zx2hukt24fmgwkkqpzolieq._file
Result
Malware family:
n/a
Score:
  7/10
Tags:
n/a
Link:
https://tria.ge/reports/220207-jczsdshbcp/
Behaviour
Suspicious use of WriteProcessMemory
Enumerates physical storage devices
Checks computer location settings
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Comments