General
-
Target
download.exe
-
Size
23KB
-
Sample
210110-s5bp282q6a
-
MD5
bb00c53e0777a63206a53389edd2cef0
-
SHA1
d6454601a8e1164527fdfbbe453a949e15a3f6d3
-
SHA256
60c9ff6f9a97ea33927a9806855d94c0294ee3a907dd82fe6b1ad89f25ff8b6c
-
SHA512
df52dbf2a8d094adfee388dc87502a1f3f481fd5b829eed11af441c4bd88abd1e3986557f9499ef83420b4234c87e74b164773c8d087e3261fa9158b8b9729c9
Static task
static1
Behavioral task
behavioral1
Sample
download.exe
Resource
win7v20201028
Behavioral task
behavioral2
Sample
download.exe
Resource
win10v20201028
Malware Config
Extracted
njrat
0.7d
Eu
225551.duckdns.org:1177
1c67227486cb440a255655e419b1c7fc
-
reg_key
1c67227486cb440a255655e419b1c7fc
-
splitter
|'|'|
Targets
-
-
Target
download.exe
-
Size
23KB
-
MD5
bb00c53e0777a63206a53389edd2cef0
-
SHA1
d6454601a8e1164527fdfbbe453a949e15a3f6d3
-
SHA256
60c9ff6f9a97ea33927a9806855d94c0294ee3a907dd82fe6b1ad89f25ff8b6c
-
SHA512
df52dbf2a8d094adfee388dc87502a1f3f481fd5b829eed11af441c4bd88abd1e3986557f9499ef83420b4234c87e74b164773c8d087e3261fa9158b8b9729c9
Score10/10-
Executes dropped EXE
-
Modifies Windows Firewall
-
Drops startup file
-
Loads dropped DLL
-
Adds Run key to start application
-