General
-
Target
3fc37dc097e9af0bde7a150d600b9162.exe
-
Size
93KB
-
Sample
211017-hzyceacdg5
-
MD5
3fc37dc097e9af0bde7a150d600b9162
-
SHA1
651f143d624f21827550ba8da11813ce74450429
-
SHA256
3765c62b096e83b14eebdf89ec78683e373be4fb4c63de1e599981979f79168f
-
SHA512
e825dad16affbd61c18a69b0f35f224ff42510b088b783d39d96e6471b3be2feec1290f45da3b0bab9943e0be5c84a4ff83233316d9196e1bf79579d0f5f0fc4
Behavioral task
behavioral1
Sample
3fc37dc097e9af0bde7a150d600b9162.exe
Resource
win7-en-20211014
Behavioral task
behavioral2
Sample
3fc37dc097e9af0bde7a150d600b9162.exe
Resource
win10-en-20210920
Malware Config
Extracted
njrat
0.7d
HacKed
d2VsbC1ncm9vbWVkLW1hc2suYXV0by5wbGF5aXQuZ2cStrik:NTQ1MDY=
6c32002b041e622ed9509aeeaf370e5b
-
reg_key
6c32002b041e622ed9509aeeaf370e5b
-
splitter
|'|'|
Targets
-
-
Target
3fc37dc097e9af0bde7a150d600b9162.exe
-
Size
93KB
-
MD5
3fc37dc097e9af0bde7a150d600b9162
-
SHA1
651f143d624f21827550ba8da11813ce74450429
-
SHA256
3765c62b096e83b14eebdf89ec78683e373be4fb4c63de1e599981979f79168f
-
SHA512
e825dad16affbd61c18a69b0f35f224ff42510b088b783d39d96e6471b3be2feec1290f45da3b0bab9943e0be5c84a4ff83233316d9196e1bf79579d0f5f0fc4
Score8/10-
Disables Task Manager via registry modification
-
Modifies Windows Firewall
-
Drops startup file
-