General
- Target a58c94f7cedbf12a9de75d4565c45387.exe
- Size 31KB
- Sample220323-bkl79sdbf3
- SHA256 2ec90df668caec1d94c3d787e8fd915567888788938e14ca0a86dcda9c8124eb
- MD5 a58c94f7cedbf12a9de75d4565c45387
- SHA1 d1c5d8cb00e8ab6f41429efcea4c26c10e2a32fb
- SHA512 63a6cb30679bc8a6e4de972f74413692a21c7c39abddb036e57f75ed42dbae7ba06890221fed7dcc1df9c89c4061775f52b3fef57f31c08f59efbad0a6b12d9e
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
a58c94f7cedbf12a9de75d4565c45387.exe
Resource
win7-20220310-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
a58c94f7cedbf12a9de75d4565c45387.exe
Resource
win10v2004-en-20220113
0 signatures
0 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
0.7d
Botnet
-
MyBot
C2
-
8.tcp.ngrok.io:17899
Mutex
-
ffe0467363738a7df7b920380070016f
Attributes
-
reg_key
ffe0467363738a7df7b920380070016f
-
splitter
Y262SUCZ4UJJ
Targets
-
- Target a58c94f7cedbf12a9de75d4565c45387.exe
- Size 31KB
- SHA256 2ec90df668caec1d94c3d787e8fd915567888788938e14ca0a86dcda9c8124eb
- MD5 a58c94f7cedbf12a9de75d4565c45387
- SHA1 d1c5d8cb00e8ab6f41429efcea4c26c10e2a32fb
- SHA512 63a6cb30679bc8a6e4de972f74413692a21c7c39abddb036e57f75ed42dbae7ba06890221fed7dcc1df9c89c4061775f52b3fef57f31c08f59efbad0a6b12d9e
- MD5 SHA1 SHA512
Score10/10Modifies Windows Firewall
Adds Run key to start application