General
-
Target
a20a44e2add8f2ee2434258a20ac815e.exe
-
Size
93KB
-
Sample
211204-3fljqabgdn
-
MD5
a20a44e2add8f2ee2434258a20ac815e
-
SHA1
bf2886c5bda80c2cc1a1a8d3d270f3e82f3f39b9
-
SHA256
87b9a82fa05019692e89dc944a4fe1ab669d1c844abfd509c7e3648a024d4a73
-
SHA512
ebb8b81d74aaf9475f64a23116da3d62497a6c92f6a7ac33fdcb7895e0aab6419c86ab92e104dc66cfc13a5bd0faa104fb3a997ce7bcfd0044e2ad3d25273e36
Behavioral task
behavioral1
Sample
a20a44e2add8f2ee2434258a20ac815e.exe
Resource
win7-en-20211014
Malware Config
Extracted
njrat
0.7d
HacKed
FRANSESCOTA5LjEyFRANSESCOy4xFRANSESCOTguNjFRANSESCOStrik:NDQz
3f0e7e396c4b65a76b6471f1f9d6d90a
-
reg_key
3f0e7e396c4b65a76b6471f1f9d6d90a
-
splitter
|'|'|
Targets
-
-
Target
a20a44e2add8f2ee2434258a20ac815e.exe
-
Size
93KB
-
MD5
a20a44e2add8f2ee2434258a20ac815e
-
SHA1
bf2886c5bda80c2cc1a1a8d3d270f3e82f3f39b9
-
SHA256
87b9a82fa05019692e89dc944a4fe1ab669d1c844abfd509c7e3648a024d4a73
-
SHA512
ebb8b81d74aaf9475f64a23116da3d62497a6c92f6a7ac33fdcb7895e0aab6419c86ab92e104dc66cfc13a5bd0faa104fb3a997ce7bcfd0044e2ad3d25273e36
-
suricata: ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)
suricata: ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)
-
Modifies Windows Firewall
-