Overview

overview

10

Static

static

10

8b1591597e...b7.exe

windows7_x64

8

8b1591597e...b7.exe

windows10_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8b1591597ee8d31f95502e15cb409bb7.exe

  • Size

    93KB

  • Sample

    211204-jftqjsafcn

  • MD5

    8b1591597ee8d31f95502e15cb409bb7

  • SHA1

    e27d6a8fbea33a22fcb0e6a2932394200c2cd63a

  • SHA256

    c802ad69a90e92057e9e356cb084b3673d27f8d012634318dc839f3a833a36b3

  • SHA512

    ae2803ef4fa5c683ab2710924ca8c3d30e396048944160ef871aaf86fbb7ce260205eb6da8fb92392958829e56d494291fc52a29bb4be9500351769ba31e9364

Score
10/10
njrathackerevasion

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

hacker

C2

aGFja3dpdGhmYWlzYWwuaG9wdG8ub3Jn:MTE3Nw==

Mutex

b67003c5eaeeea243544be5319641b07

Attributes
  • reg_key

    b67003c5eaeeea243544be5319641b07

  • splitter

    |'|'|

Targets

    • Target

      8b1591597ee8d31f95502e15cb409bb7.exe

    • Size

      93KB

    • MD5

      8b1591597ee8d31f95502e15cb409bb7

    • SHA1

      e27d6a8fbea33a22fcb0e6a2932394200c2cd63a

    • SHA256

      c802ad69a90e92057e9e356cb084b3673d27f8d012634318dc839f3a833a36b3

    • SHA512

      ae2803ef4fa5c683ab2710924ca8c3d30e396048944160ef871aaf86fbb7ce260205eb6da8fb92392958829e56d494291fc52a29bb4be9500351769ba31e9364

    Score
    8/10
    evasion
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Modify Existing Service

1
T1031

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks