General
-
Target
248819366C125936DCE7C0E5AF0119C6DCACF2E2F3C3B.exe
-
Size
214KB
-
Sample
211120-2wntcadcfk
-
MD5
47694f07c6d517c05f97225da98adc15
-
SHA1
8aae74664ca09973615292e572a927043f9d2f9e
-
SHA256
248819366c125936dce7c0e5af0119c6dcacf2e2f3c3beef78ea03ffe8b9ab33
-
SHA512
586ea910189147d8f675d57c720a03c8abef8eec25a72b70d65d2a0daa21a2841c883ba024a5c781a8ad0304232842e09711ab7f604cb50c75a347fe9eec046f
Static task
static1
Behavioral task
behavioral1
Sample
248819366C125936DCE7C0E5AF0119C6DCACF2E2F3C3B.exe
Resource
win7-en-20211104
Behavioral task
behavioral2
Sample
248819366C125936DCE7C0E5AF0119C6DCACF2E2F3C3B.exe
Resource
win10-en-20211014
Malware Config
Extracted
njrat
Hallaj PRO Rat [Fixed]
17.12.2017
ytka.duckdns.org:1605
f58babab038d7b7e993d811afbfd85b8
-
reg_key
f58babab038d7b7e993d811afbfd85b8
-
splitter
boolLove
Targets
-
-
Target
248819366C125936DCE7C0E5AF0119C6DCACF2E2F3C3B.exe
-
Size
214KB
-
MD5
47694f07c6d517c05f97225da98adc15
-
SHA1
8aae74664ca09973615292e572a927043f9d2f9e
-
SHA256
248819366c125936dce7c0e5af0119c6dcacf2e2f3c3beef78ea03ffe8b9ab33
-
SHA512
586ea910189147d8f675d57c720a03c8abef8eec25a72b70d65d2a0daa21a2841c883ba024a5c781a8ad0304232842e09711ab7f604cb50c75a347fe9eec046f
Score10/10-
suricata: ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)
suricata: ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)
-