General
-
Target
0cddbc246dd35d0e7707910f12c968b7cebeb102afb61292aff19021d21fb487
-
Size
274KB
-
Sample
220121-3ew9tscha4
-
MD5
94c2a55970ad8b796e7610a8a8999a60
-
SHA1
9cfdb16851a0c9a5e698ac34cdc59d50dc8e8cf9
-
SHA256
0cddbc246dd35d0e7707910f12c968b7cebeb102afb61292aff19021d21fb487
-
SHA512
5bdcaa4d746f0b004392aee2b2d7103571d140ae23ee4ee3aa25f7ec6e50175610321fe2db5cc263ab9ae3bb8386b9f8a755ac119b519095836046ece64456f3
Static task
static1
Behavioral task
behavioral1
Sample
0cddbc246dd35d0e7707910f12c968b7cebeb102afb61292aff19021d21fb487.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
0cddbc246dd35d0e7707910f12c968b7cebeb102afb61292aff19021d21fb487.exe
Resource
win10-en-20211208
Malware Config
Extracted
njrat
0.7.3
NOTIFICACIÓN
rewt6.duckdns.org:1990
Client.exe
-
reg_key
Client.exe
-
splitter
1990
Targets
-
-
Target
0cddbc246dd35d0e7707910f12c968b7cebeb102afb61292aff19021d21fb487
-
Size
274KB
-
MD5
94c2a55970ad8b796e7610a8a8999a60
-
SHA1
9cfdb16851a0c9a5e698ac34cdc59d50dc8e8cf9
-
SHA256
0cddbc246dd35d0e7707910f12c968b7cebeb102afb61292aff19021d21fb487
-
SHA512
5bdcaa4d746f0b004392aee2b2d7103571d140ae23ee4ee3aa25f7ec6e50175610321fe2db5cc263ab9ae3bb8386b9f8a755ac119b519095836046ece64456f3
Score10/10-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-