General
-
Target
jYkChFzZ.exe
-
Size
31KB
-
Sample
201202-3dmnydvzbe
-
MD5
d7e959acd7da6149aff2e71a7ab0713b
-
SHA1
578defaa4988bfc938688c6dea302c47c8d86ba0
-
SHA256
88d74958dd9791ae6b5955f1b3499d32beefb8aeaeaeefb6ace022e590af23b2
-
SHA512
39eee83283f5891be68b70b6a9af6ac021c71d6492f9f035302138e43716ab647e237f32ba199532d9e2df0be12a46289fe2fea5ddd4443d23858e08657bc1bf
Static task
static1
Behavioral task
behavioral1
Sample
jYkChFzZ.exe
Resource
win7v20201028
Behavioral task
behavioral2
Sample
jYkChFzZ.exe
Resource
win10v20201028
Malware Config
Extracted
njrat
0.7d
MyBot
striker223.ddns.net:1604
17cdd78b405de2165b1a9f366dd395d1
-
reg_key
17cdd78b405de2165b1a9f366dd395d1
-
splitter
Y262SUCZ4UJJ
Targets
-
-
Target
jYkChFzZ.exe
-
Size
31KB
-
MD5
d7e959acd7da6149aff2e71a7ab0713b
-
SHA1
578defaa4988bfc938688c6dea302c47c8d86ba0
-
SHA256
88d74958dd9791ae6b5955f1b3499d32beefb8aeaeaeefb6ace022e590af23b2
-
SHA512
39eee83283f5891be68b70b6a9af6ac021c71d6492f9f035302138e43716ab647e237f32ba199532d9e2df0be12a46289fe2fea5ddd4443d23858e08657bc1bf
Score10/10-
Executes dropped EXE
-
Modifies Windows Firewall
-
Drops startup file
-
Loads dropped DLL
-
Adds Run key to start application
-