Behavioral task
behavioral1
Sample
e95ec4ad49e5e96a4e363c47c8378e03d093f89bd2b0440ddf620eaa02144487.exe
Resource
win7v20210408
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
e95ec4ad49e5e96a4e363c47c8378e03d093f89bd2b0440ddf620eaa02144487.exe
Resource
win10-en
windows10_x64
0 signatures
0 seconds
General
-
Target
e95ec4ad49e5e96a4e363c47c8378e03d093f89bd2b0440ddf620eaa02144487
-
Size
37KB
-
MD5
1497f8760375c0ec9b0014ab822483b7
-
SHA1
a87f50b7535665054e96dd25da3d735419c29f9d
-
SHA256
e95ec4ad49e5e96a4e363c47c8378e03d093f89bd2b0440ddf620eaa02144487
-
SHA512
e494278de73f5920134eadef0277dfd72fc5a70b5cdade7908ca44de403476aa6135f5faf241cae5a202c56db287fa1df51dc46f42ca4077fc03f9fd5a78656c
Malware Config
Extracted
Family
njrat
Version
im523
Botnet
쿠아3
C2
rlawlsl154.codns.com:443
Mutex
fcc769702e3554e6e106d488a1e69604
Attributes
-
reg_key
fcc769702e3554e6e106d488a1e69604
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
e95ec4ad49e5e96a4e363c47c8378e03d093f89bd2b0440ddf620eaa02144487.exe windows x86