Overview

overview

10

Static

static

10

5BEDE66E23...83.exe

windows7_x64

8

5BEDE66E23...83.exe

windows10_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5BEDE66E2369345D341D7C9E0A343A1D781A1FDE3A383.exe

  • Size

    37KB

  • Sample

    211227-sx35zscgd8

  • MD5

    cb69d40567868c1cc92eefb5e2b27af1

  • SHA1

    d589126c2e18030f2e0f94d42c3f3a9e51bdc25a

  • SHA256

    5bede66e2369345d341d7c9e0a343a1d781a1fde3a38373798ffb9ba9731b866

  • SHA512

    bf79e9dccb542318314d38582691036d5a2a258aa133ca4fd94ee88c76fce1bb41374ad39588f2c9dec2e959d91ea2d3c6b6bf8c70794a72415b7cc9975e12e0

Score
10/10
njratmicrosoftevasionpersistence

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

Microsoft

C2

91.206.5.224:1212

Mutex

04d10446f5edc1673b6ff536d2b2ea65

Attributes
  • reg_key

    04d10446f5edc1673b6ff536d2b2ea65

  • splitter

    |'|'|

Targets

    • Target

      5BEDE66E2369345D341D7C9E0A343A1D781A1FDE3A383.exe

    • Size

      37KB

    • MD5

      cb69d40567868c1cc92eefb5e2b27af1

    • SHA1

      d589126c2e18030f2e0f94d42c3f3a9e51bdc25a

    • SHA256

      5bede66e2369345d341d7c9e0a343a1d781a1fde3a38373798ffb9ba9731b866

    • SHA512

      bf79e9dccb542318314d38582691036d5a2a258aa133ca4fd94ee88c76fce1bb41374ad39588f2c9dec2e959d91ea2d3c6b6bf8c70794a72415b7cc9975e12e0

    Score
    8/10
    evasionpersistence
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Modify Existing Service

1
T1031

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks