General
-
Target
e921d5f11cbdb49edbc84df43345e162f6c949e717afee3404ca5605c550c69d
-
Size
863KB
-
Sample
210921-k2wmpshab7
-
MD5
61cc86c500d27fb8ee7cdcbf3f51654e
-
SHA1
da823449b046aabc24d82519619235e4800dfd22
-
SHA256
e921d5f11cbdb49edbc84df43345e162f6c949e717afee3404ca5605c550c69d
-
SHA512
2a5d6ea3516c248a4f87ceb877417320e0324f80c8177d944f64f999724d9a4af334b5bc581bf00e4f1b49d30dab4f8bb516514eb4be6d673b5c30e35e4e5384
Static task
static1
Behavioral task
behavioral1
Sample
e921d5f11cbdb49edbc84df43345e162f6c949e717afee3404ca5605c550c69d.exe
Resource
win7v20210408
Behavioral task
behavioral2
Sample
e921d5f11cbdb49edbc84df43345e162f6c949e717afee3404ca5605c550c69d.exe
Resource
win10-en-20210920
Malware Config
Extracted
njrat
0.7d
HacKed
10.10.10.10:4444
68746e5f270d3b8fbd6f47be0fcb6282
-
reg_key
68746e5f270d3b8fbd6f47be0fcb6282
-
splitter
|'|'|
Targets
-
-
Target
e921d5f11cbdb49edbc84df43345e162f6c949e717afee3404ca5605c550c69d
-
Size
863KB
-
MD5
61cc86c500d27fb8ee7cdcbf3f51654e
-
SHA1
da823449b046aabc24d82519619235e4800dfd22
-
SHA256
e921d5f11cbdb49edbc84df43345e162f6c949e717afee3404ca5605c550c69d
-
SHA512
2a5d6ea3516c248a4f87ceb877417320e0324f80c8177d944f64f999724d9a4af334b5bc581bf00e4f1b49d30dab4f8bb516514eb4be6d673b5c30e35e4e5384
Score10/10-
Executes dropped EXE
-
Modifies Windows Firewall
-
Loads dropped DLL
-
Adds Run key to start application
-