General
-
Target
aff6092b5a0d285c117114862dd96331.exe
-
Size
93KB
-
Sample
211203-lvjj8sgacq
-
MD5
aff6092b5a0d285c117114862dd96331
-
SHA1
1001e68fc9542c10b56d87b50ebe6712d0998b48
-
SHA256
080cc05407547b573d2659503b30fb6587fb009478318a528ce2e8dbff874e7d
-
SHA512
62c8c4f388c47444e8e56e5f40165ad6eb65fc5ca90d435dfe92b3d76378532d97d3910393b68d7b807de596df687866a0ab130042dcaf49f96c4d9322803255
Behavioral task
behavioral1
Sample
aff6092b5a0d285c117114862dd96331.exe
Resource
win7-en-20211014
Malware Config
Extracted
njrat
0.7d
HacKed
b2JlaXNhbnQtYXBwYXJhdHVzLmF1dG8ucGxheWl0Lmdn:NDkyNzg=
640029187c8d6ccd2c4a99f295a6128a
-
reg_key
640029187c8d6ccd2c4a99f295a6128a
-
splitter
|'|'|
Targets
-
-
Target
aff6092b5a0d285c117114862dd96331.exe
-
Size
93KB
-
MD5
aff6092b5a0d285c117114862dd96331
-
SHA1
1001e68fc9542c10b56d87b50ebe6712d0998b48
-
SHA256
080cc05407547b573d2659503b30fb6587fb009478318a528ce2e8dbff874e7d
-
SHA512
62c8c4f388c47444e8e56e5f40165ad6eb65fc5ca90d435dfe92b3d76378532d97d3910393b68d7b807de596df687866a0ab130042dcaf49f96c4d9322803255
-
suricata: ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)
suricata: ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)
-
Disables Task Manager via registry modification
-
Modifies Windows Firewall
-
Drops startup file
-