Behavioral task
behavioral1
Sample
e56578ff67914010aa9f663876b66c4a.exe
Resource
win7-en-20211208
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
e56578ff67914010aa9f663876b66c4a.exe
Resource
win10v2004-en-20220112
windows10-2004_x64
0 signatures
0 seconds
General
-
Target
e56578ff67914010aa9f663876b66c4a
-
Size
37KB
-
MD5
e56578ff67914010aa9f663876b66c4a
-
SHA1
802b5d9f5be9fb8213b97567ebc1910e85ddd20f
-
SHA256
fc89c98b5be515bcbd365c74a9f4026d2d8dce04f9bc6255cc327b971c0bd407
-
SHA512
756b0fdfca550346207ddd292f6fa57d4db2e0207850dd9651edc341e716f80102ff6e8bdcf8fc000ce8535a1439c529b57d26313b58ad8613d99a978c17caf3
Malware Config
Extracted
Family
njrat
Version
im523
Botnet
Furios
C2
gghosting221.ddns.net:6202
Mutex
5f458dd5f03f50e31781ca69de125d55
Attributes
-
reg_key
5f458dd5f03f50e31781ca69de125d55
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
e56578ff67914010aa9f663876b66c4a.exe windows x86