General
-
Target
3f6efa7e24368a477c6404a8a92ef1b1ab9cda8c712b1849a75b4735a4602151
-
Size
31KB
-
Sample
220520-2tahyabaaq
-
MD5
1cda2dbc2d404fffa360306b72c2fc3b
-
SHA1
28c4bb45227a6b90c1302aaa2e6819ae2b6eddc4
-
SHA256
3f6efa7e24368a477c6404a8a92ef1b1ab9cda8c712b1849a75b4735a4602151
-
SHA512
1b69a918085a4b3299ae53e33b9494df41b40b172e56831fd06673f8d5a22023453cc7da07b16a5c4ba85cc8a4310b75e169bf4f71daafa29b705cbb36db20fc
Behavioral task
behavioral1
Sample
3f6efa7e24368a477c6404a8a92ef1b1ab9cda8c712b1849a75b4735a4602151.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
3f6efa7e24368a477c6404a8a92ef1b1ab9cda8c712b1849a75b4735a4602151.exe
Resource
win10v2004-20220414-en
Malware Config
Extracted
njrat
0.7d
ftloader
127.0.0.1:6522
fc3d83f540a38fef9736e485dede41c7
-
reg_key
fc3d83f540a38fef9736e485dede41c7
-
splitter
Y262SUCZ4UJJ
Targets
-
-
Target
3f6efa7e24368a477c6404a8a92ef1b1ab9cda8c712b1849a75b4735a4602151
-
Size
31KB
-
MD5
1cda2dbc2d404fffa360306b72c2fc3b
-
SHA1
28c4bb45227a6b90c1302aaa2e6819ae2b6eddc4
-
SHA256
3f6efa7e24368a477c6404a8a92ef1b1ab9cda8c712b1849a75b4735a4602151
-
SHA512
1b69a918085a4b3299ae53e33b9494df41b40b172e56831fd06673f8d5a22023453cc7da07b16a5c4ba85cc8a4310b75e169bf4f71daafa29b705cbb36db20fc
Score10/10-
Modifies Windows Firewall
-
Drops startup file
-
Adds Run key to start application
-