General

  • Target

    Onedrive.exe

  • Size

    30KB

  • Sample

    210823-98rfgbdwda

  • MD5

    2192cfe9de1e5450629e508ec785055d

  • SHA1

    881be66666b9a3c302a56c364c8d9e230ae3854d

  • SHA256

    d56742d377a636a7ced6a503d0ff26e429bde79bb431a26c0ec63f51cf418fba

  • SHA512

    cb1a1c98f6f25fe5cc07ea6ed747c860452267d44682ddaab3ac12b915afef4624713dc55f63dbb928da2974d6482edf289358b43f543a448983b6efce676dbb

Score
10/10

Malware Config

Extracted

Family

njrat

C2

lapoire3.hopto.org:4040

Mutex

T45TWTERTWERTWERTERTVERWEC

Attributes
  • reg_key

    T45TWTERTWERTWERTERTVERWEC

  • splitter

    |S400|

Targets

    • Target

      Onedrive.exe

    • Size

      30KB

    • MD5

      2192cfe9de1e5450629e508ec785055d

    • SHA1

      881be66666b9a3c302a56c364c8d9e230ae3854d

    • SHA256

      d56742d377a636a7ced6a503d0ff26e429bde79bb431a26c0ec63f51cf418fba

    • SHA512

      cb1a1c98f6f25fe5cc07ea6ed747c860452267d44682ddaab3ac12b915afef4624713dc55f63dbb928da2974d6482edf289358b43f543a448983b6efce676dbb

    Score
    7/10
    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

MITRE ATT&CK Enterprise v6

Tasks