MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 a98d9028b8f90a56e17743affb17f3ad95585e35c225714bec021330f7b9b2bd. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



STRRAT


Vendor detections: 8


Intelligence 8 IOCs YARA 1 File information Comments

SHA256 hash: a98d9028b8f90a56e17743affb17f3ad95585e35c225714bec021330f7b9b2bd
SHA3-384 hash: 3078a6b917faedf49014313a936267492c8d8c99a52cdd89da41090de1db48c22b189d837345719f6b9302121b007be6
SHA1 hash: d58ad22a32e2240aee30bbbd02c1fbda64214369
MD5 hash: cc35cd6848b337e11d8c906599f5c1a7
humanhash: maine-six-lithium-mirror
File name:a98d9028b8f90a56e17743affb17f3ad95585e35c225714bec021330f7b9b2bd
Download: download sample
Signature STRRAT
File size:494'512 bytes
First seen:2024-05-10 09:34:59 UTC
Last seen:Never
File type:Java file jar
MIME type:application/zip
ssdeep 6144:xCcYtxy9vu6UAk6HguituQ/Wc1ca2J511r4LrjGzcJw4s9KkMz85GAz4:lIyYhZujQ51iJn1r4qzcJL6KkMz85Jz4
TLSH T11FB4121E2DAB8175D11768BB1C92D2F6F76D8DB8C55D940BA2FC1448297CE088F02EDE
TrID 72.9% (.JAR) Java Archive (13500/1/2)
21.6% (.ZIP) ZIP compressed archive (4000/1)
5.4% (.PG/BIN) PrintFox/Pagefox bitmap (640x800) (1000/1)
Reporter NDA0E
Tags:jar STRRAT

Intelligence


File Origin
# of uploads :
1
# of downloads :
151
Origin country :
NL NL
File Archive Information

This file archive contains 79 file(s), sorted by their relevance:

File name:ga.class
File size:19'669 bytes
SHA256 hash: a3bdffff236d44f68986b880b967e9a064d749e3ef91cb7c1d748ea9e4f37ef6
MD5 hash: 2aad1dfe439a6a4329588ef3c405a839
MIME type:application/x-java-applet
Signature STRRAT
File name:O.class
File size:2'449 bytes
SHA256 hash: ac6b8c4fc34b2a2f708c35c2bcc9dacda8bdcca3c37a4a10b81d845ffe5b71e2
MD5 hash: c3831b0e30bc0357042420651651bd3a
MIME type:application/x-java-applet
Signature STRRAT
File name:i.class
File size:4'632 bytes
SHA256 hash: b5fc5b4ee354bb14d3502796a6b999301a86e18db6ee42f6ff5c373ce9a66fc7
MD5 hash: 2193b71a6039de11f257ed3b2dfd8629
MIME type:application/x-java-applet
Signature STRRAT
File name:r.class
File size:2'235 bytes
SHA256 hash: 068db43b906665edb0cb2d9585958c4addb4fe53dd68892aec45208fb3f530e5
MD5 hash: e495f3610f83ac6158a3056f99dbbb6f
MIME type:application/x-java-applet
Signature STRRAT
File name:MANIFEST.MF
File size:438 bytes
SHA256 hash: ffd447eac80704756c4ab64407ffd856a9bbc30c00c76e3b5b35ff809388c9ce
MD5 hash: 0bb9bda5631beabb46dede101f9765b0
MIME type:text/plain
Signature STRRAT
File name:f.class
File size:1'924 bytes
SHA256 hash: 41a497c23c35321e96ad131ae783620eac0393694857c5d268be95dbad773801
MD5 hash: 04e720eb03ffecc3fcfa8fe85604650d
MIME type:application/x-java-applet
Signature STRRAT
File name:Z.class
File size:2'985 bytes
SHA256 hash: 37b13d5194e07b7e411b24f41016ad78fb59c1f008df7db0e8f86d4731931b7f
MD5 hash: 64c24c61179e0af1d50c8fda31b72b19
MIME type:application/x-java-applet
Signature STRRAT
File name:G.class
File size:184 bytes
SHA256 hash: 77896dbb99d6f26171aa00887596756a5991045cb42aaf1fad8eda7b653e5001
MD5 hash: 09196746ccffe36b75fdbc35fe048f50
MIME type:application/x-java-applet
Signature STRRAT
File name:WinGDI.class
File size:476 bytes
SHA256 hash: f0c62c091d59bef0da840247a3f58159d0c9d6f5447dc62df16551c727b0099b
MD5 hash: 2be9a978e161ada2ccda89954cc9c30c
MIME type:application/x-java-applet
Signature STRRAT
File name:N.class
File size:53'636 bytes
SHA256 hash: ab727c942b8632182e43aafb7aa2f8af8aa47382ed82134c6973d997ba4588e0
MD5 hash: 51bf0fdefb324acbc72ed96cb4494017
MIME type:application/x-java-applet
Signature STRRAT
File name:W.class
File size:4'116 bytes
SHA256 hash: aa17c1121b9b4bc80222868879ad082da8e74b3ba304cb1bc818eb809d6a0116
MD5 hash: c4a29d297bfe801458e45e9e01e7d46f
MIME type:application/x-java-applet
Signature STRRAT
File name:g.class
File size:3'727 bytes
SHA256 hash: 0495280aabf1757a11082e533aeb950b0b4784217e3a6663fc597d03481f20c1
MD5 hash: d24f1b95155528642aef349f13ad9d5f
MIME type:application/x-java-applet
Signature STRRAT
File name:Ca.class
File size:2'258 bytes
SHA256 hash: 235478490b2d11aa560007d924eb62e4a412531c14587866d15d434d20601226
MD5 hash: d1f4e866a078ae77eff29148bb32c44d
MIME type:application/x-java-applet
Signature STRRAT
File name:d.class
File size:423 bytes
SHA256 hash: ce81238c7fecfd994e82e383e602f2489f235211256a713fe0a9d47f8e76271a
MD5 hash: f6e05f6ddde27b7f6b73664cb0f1892e
MIME type:application/x-java-applet
Signature STRRAT
File name:o.class
File size:2'747 bytes
SHA256 hash: 946524e6eafadb303a7953094bdf468b17f78a9d649bdeb620213482218d5800
MD5 hash: faad4f1119d30426313272c46267018f
MIME type:application/x-java-applet
Signature STRRAT
File name:x.class
File size:2'539 bytes
SHA256 hash: c672064e2b723c3b6a4d103cd8a30445597e80b961f84112f2908d9270f91e54
MD5 hash: e4ff9035ad6fbae746f7f3742118110a
MIME type:application/x-java-applet
Signature STRRAT
File name:aa.class
File size:2'206 bytes
SHA256 hash: 9b705f6d84ac95cf17cc8cf4c66e19f590fcc534a8c165074f9c2e5525460b30
MD5 hash: a6e7321ca1451a16257e223c3658d920
MIME type:application/x-java-applet
Signature STRRAT
File name:User32.class
File size:542 bytes
SHA256 hash: 92bedb61fc45993ec3345a44f3ca15cc4192a4d85e4c17133d96a68070d3a1d2
MD5 hash: b33b615c464f0f9544c998cc9f2c8526
MIME type:application/x-java-applet
Signature STRRAT
File name:da.class
File size:7'773 bytes
SHA256 hash: c227625a4c42a94f553f29640201e37d7205d2c60e2f10683d5dfedd8538e34e
MD5 hash: 30b3d58d1f44acea558862fc11b7e095
MIME type:application/x-java-applet
Signature STRRAT
File name:j.class
File size:184 bytes
SHA256 hash: 9421ae495eeb876fa1fc477202e7400b67450b1179a7817e89fa9a6522534bbf
MD5 hash: 37c1d94e14eeddc73f513892d412d8e0
MIME type:application/x-java-applet
Signature STRRAT
File name:Ha.class
File size:2'385 bytes
SHA256 hash: 376db779965613428ad88f6b18e96cd8761259c52a96ef9b835c25b3554f5bc5
MD5 hash: 1c5a5ef33a19b4b740b57350cd2628ae
MIME type:application/x-java-applet
Signature STRRAT
File name:T.class
File size:691 bytes
SHA256 hash: ad7b3f78f60115c2f18d0f7d3e09ae281e83669483913323c9caf0553109dff5
MD5 hash: a9be18c86b2c51998e8cd8c18b536afb
MIME type:application/x-java-applet
Signature STRRAT
File name:P.class
File size:5'542 bytes
SHA256 hash: a94b68bc3d261e90350caa6b41ecdecb08864c2783b6e791f3491ae4a46a7900
MD5 hash: 9e719470ff2ad898bb989fc5c4d0bb80
MIME type:application/x-java-applet
Signature STRRAT
File name:z.class
File size:2'724 bytes
SHA256 hash: 7b6e943099aa0ecd86ce3cdf585a5f0484c3dee14cf82e2eb8418178c6278b23
MD5 hash: d19dc6394dc4f19871d024b6687634d0
MIME type:application/x-java-applet
Signature STRRAT
File name:HBrowserNativeApis.class
File size:14'431 bytes
SHA256 hash: 08bfca043ba6e0e54c2d596be0ded129fe14496d927a65b80ec0a0e713506f8a
MD5 hash: c0da5a266ae0fe2d913400c06d488d4b
MIME type:application/x-java-applet
Signature STRRAT
File name:Y.class
File size:36'546 bytes
SHA256 hash: 3554c20949b37c6b1bc1b35de63c3125290e6b5c51937add146b0ba195ed0eca
MD5 hash: 2f18d7a6295992e7cfc5c12ddbfb8f57
MIME type:application/x-java-applet
Signature STRRAT
File name:FirstRun.class
File size:15'363 bytes
SHA256 hash: f113c6d8d40c2fb0ddb238b95d51d5fa948a98cd0d717b65df34370d2c368532
MD5 hash: 8069f05529b4994bba21084881693f5d
MIME type:application/x-java-applet
Signature STRRAT
File name:Da.class
File size:15'161 bytes
SHA256 hash: e1fe08bccf821bfb89471460a817e49c74435ebe7d35143bc7419300f1742d9e
MD5 hash: 34431825a3fc63260d4826bb424db23a
MIME type:application/x-java-applet
Signature STRRAT
File name:Fa.class
File size:12'411 bytes
SHA256 hash: d269a84bf072a0d573045acec4247078b4413fa6e763429c67317b9377883dad
MD5 hash: f68951d054f4bf7f1e844831079401dc
MIME type:application/x-java-applet
Signature STRRAT
File name:v.class
File size:2'347 bytes
SHA256 hash: 7ee27e18fc663cb74a1cbf7ad54f3665a31e04316c18af3caac8c0dd790bbc23
MD5 hash: 859e0745b3d7edce0627aab398fe07a5
MIME type:application/x-java-applet
Signature STRRAT
File name:F.class
File size:2'305 bytes
SHA256 hash: d22b21c023fb80785977ffd226e5872371004e83045fe6f3d5fa2023baaeca4f
MD5 hash: a75e648fb1adfc6dfc84f39cebf54c06
MIME type:application/x-java-applet
Signature STRRAT
File name:Aa.class
File size:4'172 bytes
SHA256 hash: 78fce39ddf9aa384ce9693c0d56467996b0329cc1d9ed6ab2696e4c83a34856c
MD5 hash: bc9fd409c9e3fb68a72d0b54404dfb8e
MIME type:application/x-java-applet
Signature STRRAT
File name:u.class
File size:18'391 bytes
SHA256 hash: d1b1c2cafae137e229eb948774af0f6f7cfbb31e4b2e7dfb6716f9497ccc3418
MD5 hash: 7987284e6d5f2d6fbf420d336897432f
MIME type:application/x-java-applet
Signature STRRAT
File name:B.class
File size:8'918 bytes
SHA256 hash: ae1aa57b95a075588e036cd5a3c965f1b510fd8f78cfd876dabcd59ddc1d2c72
MD5 hash: dd97a810175b208c7e4a7c3bac042a7b
MIME type:application/x-java-applet
Signature STRRAT
File name:fa.class
File size:25'087 bytes
SHA256 hash: b3596bb0b682631194896601aa6b194068551c6ac850fb395bec34a7a7768502
MD5 hash: a5b4d0ef10255356a46a4a2e59a2c35f
MIME type:application/x-java-applet
Signature STRRAT
File name:s.class
File size:6'702 bytes
SHA256 hash: 34fb855f91197d8c8ddb04d6acabd5ffde1600f5843931e375e9b7bb3efe70e0
MD5 hash: 282b730a60afb3553fccf7802297cb78
MIME type:application/x-java-applet
Signature STRRAT
File name:X.class
File size:46'898 bytes
SHA256 hash: bbb9053c883ad6be4b13bdd5665731e5add3b53a5ff0ca894d6d869fd76286a9
MD5 hash: 3a257f0af1d76d0ddd4d7a2e7a73b154
MIME type:application/x-java-applet
Signature STRRAT
File name:Kernel32.class
File size:407 bytes
SHA256 hash: 6c7d40fd4c5c48273041dff4203438b991f324758d0e57af5d238913392756ad
MD5 hash: 559a2746d3cae76456ded361cb827d1c
MIME type:application/x-java-applet
Signature STRRAT
File name:Ma.class
File size:36'403 bytes
SHA256 hash: 3efacc9d7138f5ac719f8eaf3e5411ded07e879117f18e3b84bba678b8b348f6
MD5 hash: 8d844e7c5e37f07686609df17da06806
MIME type:application/x-java-applet
Signature STRRAT
File name:a.class
File size:2'783 bytes
SHA256 hash: 66536592dc474081cdf88159b55bf5b9bb95f8dae5333c10292913fa1819ae4f
MD5 hash: 6f269b69111d9914aa77bb4ecebc38ce
MIME type:application/x-java-applet
Signature STRRAT
File name:ia.class
File size:8'287 bytes
SHA256 hash: c33b4a3c7d4cf0c255f17d92c67cf07ce0fcb88651b24574659ab91e2e52e6e3
MD5 hash: fafd8b0d8da3bfae0c924638cecdb519
MIME type:application/x-java-applet
Signature STRRAT
File name:k.class
File size:3'976 bytes
SHA256 hash: bbb317fb8f1be228c25de42a4e8ac099a507fa131c36c798ab4dd48151125439
MD5 hash: b7649cf89cfdcc1229f8131af8c5c9ae
MIME type:application/x-java-applet
Signature STRRAT
File name:n.class
File size:17'363 bytes
SHA256 hash: f17ef67ada545481b2269ef2ce3bcb5ce93d8972358fe9657e5d26314260a126
MD5 hash: de18184058a21341fc7d5c7108bf7edd
MIME type:application/x-java-applet
Signature STRRAT
File name:la.class
File size:4'179 bytes
SHA256 hash: 0b5d799d0ea600eb1e297ebdd2a0f12e5328f72675a908a0a8fea21e2ed3a2c7
MD5 hash: 83b86886b7a3b0ef0e0ba393e426bd44
MIME type:application/x-java-applet
Signature STRRAT
File name:e.class
File size:2'698 bytes
SHA256 hash: 705b2db8e1c65d4f48714f1803e2aa9ddd749a5c1c6b3ddd16682dde44277d8d
MD5 hash: 3ef632f6fff824c66322b52df45cf371
MIME type:application/x-java-applet
Signature STRRAT
File name:ja.class
File size:2'820 bytes
SHA256 hash: cb51114b9b96c040eb8ead9c0906570ab11bd679b3017f45aa7ea54d3da284b7
MD5 hash: 98fdc7c292d3c91bd1eafb06f0506d1e
MIME type:application/x-java-applet
Signature STRRAT
File name:h.class
File size:30'862 bytes
SHA256 hash: 62a06be120c5abd3bb1683cffc090e85fc867ee2a912471e20f1d4d8495976cd
MD5 hash: d33f6ce5b46084808951653011c7536a
MIME type:application/x-java-applet
Signature STRRAT
File name:A.class
File size:2'205 bytes
SHA256 hash: 2617ea9405c5730395fb7393d13dbc8b2dc9874d44ce20730a06257d7682a6f6
MD5 hash: f31b3ed739c61704ab57cbdc6d958e25
MIME type:application/x-java-applet
Signature STRRAT
File name:q.class
File size:4'361 bytes
SHA256 hash: 0ce0adb172966f225220298bf0ccc17c549544771a078e127c321386832c7e4e
MD5 hash: 01e86c0a128ad0d897debb6673095e0e
MIME type:application/x-java-applet
Signature STRRAT
File name:Ia.class
File size:20'664 bytes
SHA256 hash: 481b6f21421cd96f7ecbf43fee9d041da9ab35ea3f041572e6eecb5b7c5e7d72
MD5 hash: fb140abe22588ecdcf0d743f27e321be
MIME type:application/x-java-applet
Signature STRRAT
File name:J.class
File size:2'647 bytes
SHA256 hash: 0e382e3112179bbcea54c77793463548d2e6a3038762eb6e7393b0632d6bf940
MD5 hash: 73c8520aa759284bbe1d0c9f85048791
MIME type:application/x-java-applet
Signature STRRAT
File name:t.class
File size:2'421 bytes
SHA256 hash: ace29b79ad780be146b7191caebc5305fd556366ffd378ff24cce668c8d53c7f
MD5 hash: 4b181bd380ffc729687e479ffd2082ff
MIME type:application/x-java-applet
Signature STRRAT
File name:p.class
File size:16'919 bytes
SHA256 hash: 1e3a52f21a56e6d543298bbdbf8fb6092fb420e8bdf1a74471bb0459460b60e1
MD5 hash: 78c3501fce2bc2ee16949d40668986e1
MIME type:application/x-java-applet
Signature STRRAT
File name:Ba.class
File size:22'433 bytes
SHA256 hash: dca4b264d79671dd889e04eed88436c532e1c1cfe00a3117b249a05f4175203b
MD5 hash: fb2766958207e46a02bb947475a775ef
MIME type:application/x-java-applet
Signature STRRAT
File name:C.class
File size:2'661 bytes
SHA256 hash: 9e49f23dc4fc5964f742a92489729787b58d9b39d712eec29cb35679c4ddd6b8
MD5 hash: b2d91aa8650e48415cbe035da77a0b88
MIME type:application/x-java-applet
Signature STRRAT
File name:b.class
File size:2'338 bytes
SHA256 hash: ea36e4bdd92485e5b285751714d1cd98f8eb0ca2cd6155eb75347a4f0de1a02c
MD5 hash: 82ecd41e8122587f46a7cdcfa6a6318c
MIME type:application/x-java-applet
Signature STRRAT
File name:U.class
File size:3'305 bytes
SHA256 hash: 1d43cd5b7ed99dfc0fe48659558ef4d30267f200dddf465fcba51e19e9c12127
MD5 hash: 50040c19cf4de5542560bda1fe1a71e2
MIME type:application/x-java-applet
Signature STRRAT
File name:m.class
File size:2'437 bytes
SHA256 hash: ace36d63a29c74b9587ed177fa72c537ce3212b2b0c62f03565c38ae642c1704
MD5 hash: 9ae97a0fdd206e1b7656e985b9bb137d
MIME type:application/x-java-applet
Signature STRRAT
File name:L.class
File size:21'627 bytes
SHA256 hash: 84049f8577eb01d2d23ac3dd3d48ed12ef5024752fd31e06d820a949f48a6b34
MD5 hash: 0c2b06fed0353d0cfebd7854352b00bd
MIME type:application/x-java-applet
Signature STRRAT
File name:La.class
File size:8'299 bytes
SHA256 hash: 8a3bb0803eb0be96c5162fb342f5b8aee0d08e9880e362d7fd1f1ba940df0f32
MD5 hash: 5883a55dc67aad14dee2849f40171080
MIME type:application/x-java-applet
Signature STRRAT
File name:M.class
File size:10'619 bytes
SHA256 hash: ac5f0daca7d7a7d5b91cbda4296a9705f362c5986468fc07190bc6852556ea9f
MD5 hash: a803e8f20e27228027cb7b2c85dc5fe7
MIME type:application/x-java-applet
Signature STRRAT
File name:Q.class
File size:14'259 bytes
SHA256 hash: 7da7cb51a1cf801659021c63148e44c159b2213fd0a94a7bcab738365e13b4e1
MD5 hash: b7b72cca5d16a6862d58d01dc528b094
MIME type:application/x-java-applet
Signature STRRAT
File name:ba.class
File size:2'321 bytes
SHA256 hash: 4da2e27824bf3d3d04cfb2f84029cd3e75bf796f596ec4e6355b5a9cd26b3b8a
MD5 hash: 19a582c3ed4fd0ca8d05de58b0c3a7d6
MIME type:application/x-java-applet
Signature STRRAT
File name:K.class
File size:2'203 bytes
SHA256 hash: f2cdae4d14fe3cdb38315a08877872b0becf6f5f8abbeb3aab20de1c34c68583
MD5 hash: aeb7920845250185f1dbb950145ee18a
MIME type:application/x-java-applet
Signature STRRAT
File name:S.class
File size:2'398 bytes
SHA256 hash: 304d04a50405bd760b6592966c1f97e59c3e6cfa28739f23ec5d80a9f4d742de
MD5 hash: b8d3fec0cb25fc0b3d63ef6b7ee015c1
MIME type:application/x-java-applet
Signature STRRAT
File name:I.class
File size:10'049 bytes
SHA256 hash: c06501d578cda739bf62260890a1b03bb03f575e8812fbd9a32ce10e46ddfac6
MD5 hash: 94829d4c8019407a8503da4fa5aa6a1b
MIME type:application/x-java-applet
Signature STRRAT
File name:GDI32.class
File size:478 bytes
SHA256 hash: 6f58e3e228452fd20a5d1d1b392413f398febaaccb031b8482df568c0f4a5f80
MD5 hash: 3569639114bfb130897838952288014c
MIME type:application/x-java-applet
Signature STRRAT
File name:w.class
File size:5'573 bytes
SHA256 hash: 5aaa149e5a16e7fb0c63a6339d786d16fca963d24cda9c34c15ea280098a0290
MD5 hash: 54435fdf23cfd670db049cb6bb1f8b03
MIME type:application/x-java-applet
Signature STRRAT
File name:c.class
File size:8'520 bytes
SHA256 hash: e5acc733f8ad8a51b0281b1e31537efa7c8770fca5e2672feeaeadc78c0a6aef
MD5 hash: 634943cebb6cd0f5c05d8a0a275e3c62
MIME type:application/x-java-applet
Signature STRRAT
File name:l.class
File size:38'398 bytes
SHA256 hash: 739a03bc51853ce3580e3f8aa7ccaa3a9ab96404f69703aebf430dc2c99e9a48
MD5 hash: d4fb173edcb8737b5974ce8ca1bb801c
MIME type:application/x-java-applet
Signature STRRAT
File name:R.class
File size:5'556 bytes
SHA256 hash: d1be6e96cfcf94546cb6988921508981dc74d8c816d2a36b70e1827aa46f6d29
MD5 hash: 41b6c2fe71ca35949b07f42722c9885e
MIME type:application/x-java-applet
Signature STRRAT
File name:y.class
File size:8'871 bytes
SHA256 hash: 3f8cbd125e3cf00559156fc156a5fb4dbd9f7f611ad21c4e986a8d96744afd9d
MD5 hash: 3014a04457a516dd5c59021d254a6df5
MIME type:application/x-java-applet
Signature STRRAT
File name:D.class
File size:20'997 bytes
SHA256 hash: 172bd3c3d72ddb10811896b0a3ceeb8d496565b07450ee43cbf130141767ace6
MD5 hash: 33142a377475973de39b4f2eeb2182ec
MIME type:application/x-java-applet
Signature STRRAT
File name:config.txt
File size:220 bytes
SHA256 hash: fb57de3f13721494a2e50d0049f6376fe8f08d3ce44f4e61d130793e20e70a29
MD5 hash: 531979586bfa3cb310af40d26d87b348
MIME type:text/plain
Signature STRRAT
File name:H.class
File size:4'998 bytes
SHA256 hash: 8aa167d2902fd38e40cdee3e2d0b9f053ffc8425d676d762b88980c694c1f450
MD5 hash: 469a3f75e8c216a66160b6047d6cd4d7
MIME type:application/x-java-applet
Signature STRRAT
File name:V.class
File size:9'124 bytes
SHA256 hash: 9bba012a1610c3cd5c5fe8e53a1d57f193e397297270af91243f5bdd96118df8
MD5 hash: 8fbbf90df8fe1c4d999fc5c0a2cde33f
MIME type:application/x-java-applet
Signature STRRAT
File name:ca.class
File size:57'807 bytes
SHA256 hash: f21ed2cc6fee9ad7f2ab50dcec1faa17f8b4030bc198a5753be7dd53b9496b78
MD5 hash: 86b76fef02de7f491223565d56b4e8d5
MIME type:application/x-java-applet
Signature STRRAT
File name:ha.class
File size:45'512 bytes
SHA256 hash: a32b07c8a5ba212f7279b350c5e834fa81000add7f8f410d3f6454dbc7edf904
MD5 hash: 384831b9fd44309f9709e08e7bb81518
MIME type:application/x-java-applet
Signature STRRAT
File name:E.class
File size:4'048 bytes
SHA256 hash: 0078f85a03ab3cbc2976915940426e49756f751e97a11fe56d20d019d2d5be55
MD5 hash: e62be4ad445de12181f18dd1dee1e47b
MIME type:application/x-java-applet
Signature STRRAT
Vendor Threat Intelligence
Malware family:
ID:
1
File name:
a98d9028b8f90a56e17743affb17f3ad95585e35c225714bec021330f7b9b2bd.jar
Verdict:
Malicious activity
Analysis date:
2024-05-10 09:39:15 UTC
Tags:
rat strrat evasion remote

Note:
ANY.RUN is an interactive sandbox that analyzes all user actions rather than an uploaded sample
Result
Threat name:
Detection:
malicious
Classification:
troj.evad.expl
Score:
88 / 100
Signature
Antivirus detection for URL or domain
Exploit detected, runtime environment starts unknown processes
Found malware configuration
Malicious sample detected (through community Yara rule)
Multi AV Scanner detection for submitted file
Yara detected AllatoriJARObfuscator
Yara detected STRRAT
Behaviour
Behavior Graph:
behaviorgraph top1 signatures2 2 Behavior Graph ID: 1439579 Sample: k5Xx8h8nPx.jar Startdate: 10/05/2024 Architecture: WINDOWS Score: 88 19 Found malware configuration 2->19 21 Malicious sample detected (through community Yara rule) 2->21 23 Antivirus detection for URL or domain 2->23 25 4 other signatures 2->25 7 java.exe 9 2->7         started        9 7za.exe 86 2->9         started        process3 process4 11 icacls.exe 1 7->11         started        13 conhost.exe 7->13         started        15 conhost.exe 9->15         started        process5 17 conhost.exe 11->17         started       
Threat name:
ByteCode-JAVA.Trojan.Generic
Status:
Suspicious
First seen:
2024-05-04 14:40:43 UTC
File Type:
Binary (Archive)
Extracted files:
79
AV detection:
14 of 38 (36.84%)
Threat level:
  5/5
Result
Malware family:
Score:
  10/10
Tags:
family:strrat discovery persistence stealer trojan
Behaviour
Creates scheduled task(s)
Suspicious use of AdjustPrivilegeToken
Suspicious use of WriteProcessMemory
Uses Task Scheduler COM API
Adds Run key to start application
Looks up external IP address via web service
Drops startup file
Loads dropped DLL
Modifies file permissions
STRRAT
Please note that we are no longer able to provide a coverage score for Virus Total.

YARA Signatures


MalwareBazaar uses YARA rules from several public and non-public repositories, such as YARAhub and Malpedia. Those are being matched against malware samples uploaded to MalwareBazaar as well as against any suspicious process dumps they may create. Please note that only results from TLP:CLEAR rules are being displayed.

Rule name:JAR_STRRAT_April_2024
Author:NDA0E
Description:Detects STRRAT Java Archive

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Comments