General
-
Target
1a3b100043d6e616674e8ccf0bd086eacccb6985aa8182029a2717aa57be5f79
-
Size
460KB
-
Sample
210923-h1jkmsacer
-
MD5
3b6f38ea6928bca0be7ce6cf39ec8959
-
SHA1
5ea0766825327580776bc88add0e9267d97965e5
-
SHA256
1a3b100043d6e616674e8ccf0bd086eacccb6985aa8182029a2717aa57be5f79
-
SHA512
d8355e551f8cfab86523036a69407a86723add802a361eeaf54c65301ed5c4b88713aada239e6e41ac9b326e74f8652488498126d6883b58c5425f0f50543ec0
Static task
static1
Behavioral task
behavioral1
Sample
1a3b100043d6e616674e8ccf0bd086eacccb6985aa8182029a2717aa57be5f79.exe
Resource
win7-en-20210920
Behavioral task
behavioral2
Sample
1a3b100043d6e616674e8ccf0bd086eacccb6985aa8182029a2717aa57be5f79.exe
Resource
win10v20210408
Malware Config
Extracted
njrat
Njrat 0.7 Golden By Hassan Amiri
v1
xyz.videomarket.eu:1970
Windows Update
-
reg_key
Windows Update
-
splitter
|Hassan|
Targets
-
-
Target
1a3b100043d6e616674e8ccf0bd086eacccb6985aa8182029a2717aa57be5f79
-
Size
460KB
-
MD5
3b6f38ea6928bca0be7ce6cf39ec8959
-
SHA1
5ea0766825327580776bc88add0e9267d97965e5
-
SHA256
1a3b100043d6e616674e8ccf0bd086eacccb6985aa8182029a2717aa57be5f79
-
SHA512
d8355e551f8cfab86523036a69407a86723add802a361eeaf54c65301ed5c4b88713aada239e6e41ac9b326e74f8652488498126d6883b58c5425f0f50543ec0
Score10/10-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-