General
-
Target
ad0f6231d44f6d0e08379256a3f765c0.exe
-
Size
432KB
-
Sample
211022-xdjpfscac7
-
MD5
ad0f6231d44f6d0e08379256a3f765c0
-
SHA1
765c2ba3990b9c2a603a0012dfac8e34e39eda38
-
SHA256
a665eae243d8d987de7378c95a9e7894d95b7ca6632e7455dcb9431870e67016
-
SHA512
8bcf9c48c9137b897194cd757ff80153462ce2ad2f2d468ab70ba4479808f3a8bd99006d50a0802289de43092b7079286a86091674d0173325b50ad089309eb0
Static task
static1
Behavioral task
behavioral1
Sample
ad0f6231d44f6d0e08379256a3f765c0.exe
Resource
win7-en-20210920
Behavioral task
behavioral2
Sample
ad0f6231d44f6d0e08379256a3f765c0.exe
Resource
win10-en-20211014
Malware Config
Extracted
njrat
0.7d
2021
aqq.linkpc.net:999
a1776750d898d3976ceabc94432acfb1
-
reg_key
a1776750d898d3976ceabc94432acfb1
-
splitter
|'|'|
Targets
-
-
Target
ad0f6231d44f6d0e08379256a3f765c0.exe
-
Size
432KB
-
MD5
ad0f6231d44f6d0e08379256a3f765c0
-
SHA1
765c2ba3990b9c2a603a0012dfac8e34e39eda38
-
SHA256
a665eae243d8d987de7378c95a9e7894d95b7ca6632e7455dcb9431870e67016
-
SHA512
8bcf9c48c9137b897194cd757ff80153462ce2ad2f2d468ab70ba4479808f3a8bd99006d50a0802289de43092b7079286a86091674d0173325b50ad089309eb0
Score10/10-
Executes dropped EXE
-
Modifies Windows Firewall
-
Adds Run key to start application
-