General
-
Target
e2ee9010ffc04e93475c14d0eec88610258cca058c25a6409914341b59c0b68c
-
Size
341KB
-
Sample
210929-jqedlsebd7
-
MD5
e8fb8e14c5e50dd51a7499b84e2c857a
-
SHA1
bad853c5496bc28f492c01cdc6fff77efd72dc74
-
SHA256
e2ee9010ffc04e93475c14d0eec88610258cca058c25a6409914341b59c0b68c
-
SHA512
2b15a3c3cb4b04f978043d45ac32ed2ab7dfef11ec0b6010a73a2d39b8aa112b18846cb60383c63108fd7bcd4c7f9abae26b354320902a59f923d436d73f4131
Static task
static1
Behavioral task
behavioral1
Sample
e2ee9010ffc04e93475c14d0eec88610258cca058c25a6409914341b59c0b68c.exe
Resource
win7v20210408
Malware Config
Extracted
njrat
0.7d
cvcvc
127.0.0.1:6544
f08ba698cf12b161ed2e70452386d723
-
reg_key
f08ba698cf12b161ed2e70452386d723
-
splitter
Y262SUCZ4UJJ
Targets
-
-
Target
e2ee9010ffc04e93475c14d0eec88610258cca058c25a6409914341b59c0b68c
-
Size
341KB
-
MD5
e8fb8e14c5e50dd51a7499b84e2c857a
-
SHA1
bad853c5496bc28f492c01cdc6fff77efd72dc74
-
SHA256
e2ee9010ffc04e93475c14d0eec88610258cca058c25a6409914341b59c0b68c
-
SHA512
2b15a3c3cb4b04f978043d45ac32ed2ab7dfef11ec0b6010a73a2d39b8aa112b18846cb60383c63108fd7bcd4c7f9abae26b354320902a59f923d436d73f4131
-
Modifies security service
-
Nirsoft
-
Executes dropped EXE
-
Modifies Windows Firewall
-
Stops running service(s)
-
Loads dropped DLL
-