General
-
Target
cd4805c3292fed3286bc47c43a1384eb633236c720dd2082bc4e897d2788c52b
-
Size
10.8MB
-
Sample
220320-bx88kaebe2
-
MD5
4f54150e61b5df07ad6323b964da1a98
-
SHA1
ee32dab0f4489e567ac2da159e1beb68c617c6bd
-
SHA256
cd4805c3292fed3286bc47c43a1384eb633236c720dd2082bc4e897d2788c52b
-
SHA512
d4dcc1eaf227030cc94007fc26c839d7d234e050d97dac7aa515f2ab7ecb04db66997381576cbb6287bfd9e2188d65a8cd238a07daa1c9759f582c05c9ef7c1a
Static task
static1
Behavioral task
behavioral1
Sample
cd4805c3292fed3286bc47c43a1384eb633236c720dd2082bc4e897d2788c52b.exe
Resource
win7-20220310-en
Behavioral task
behavioral2
Sample
cd4805c3292fed3286bc47c43a1384eb633236c720dd2082bc4e897d2788c52b.exe
Resource
win10v2004-en-20220113
Malware Config
Extracted
njrat
im523
Zombie
116.127.220.82:1
0f089c174b52a60dc1803fc49b6449e2
-
reg_key
0f089c174b52a60dc1803fc49b6449e2
-
splitter
|'|'|
Targets
-
-
Target
cd4805c3292fed3286bc47c43a1384eb633236c720dd2082bc4e897d2788c52b
-
Size
10.8MB
-
MD5
4f54150e61b5df07ad6323b964da1a98
-
SHA1
ee32dab0f4489e567ac2da159e1beb68c617c6bd
-
SHA256
cd4805c3292fed3286bc47c43a1384eb633236c720dd2082bc4e897d2788c52b
-
SHA512
d4dcc1eaf227030cc94007fc26c839d7d234e050d97dac7aa515f2ab7ecb04db66997381576cbb6287bfd9e2188d65a8cd238a07daa1c9759f582c05c9ef7c1a
Score10/10-
Modifies Windows Firewall
-
Drops startup file
-
Adds Run key to start application
-