General
-
Target
1042569cf8c6c21808032769a56ccb596f9d7226e5dbbf689b3dc5f91013087e
-
Size
31KB
-
Sample
220520-3p11rscbhn
-
MD5
863d99f742f8d643ed331365ae39dd8e
-
SHA1
485903e35a73d6fa7b7bb4b7fdcf03831f4493f2
-
SHA256
1042569cf8c6c21808032769a56ccb596f9d7226e5dbbf689b3dc5f91013087e
-
SHA512
1583397cbba9609864a8107f7ee8a7c82d46d63b1e7fcef137855f32c619008f8e84047311d57abab4f03f284ca5405a838ccf97fa9837b5fd69015a92b64718
Behavioral task
behavioral1
Sample
1042569cf8c6c21808032769a56ccb596f9d7226e5dbbf689b3dc5f91013087e.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
1042569cf8c6c21808032769a56ccb596f9d7226e5dbbf689b3dc5f91013087e.exe
Resource
win10v2004-20220414-en
Malware Config
Extracted
njrat
0.7d
kyky
109.202.54.48:6522
99e954fa342acd7726c6a160817080c2
-
reg_key
99e954fa342acd7726c6a160817080c2
-
splitter
Y262SUCZ4UJJ
Targets
-
-
Target
1042569cf8c6c21808032769a56ccb596f9d7226e5dbbf689b3dc5f91013087e
-
Size
31KB
-
MD5
863d99f742f8d643ed331365ae39dd8e
-
SHA1
485903e35a73d6fa7b7bb4b7fdcf03831f4493f2
-
SHA256
1042569cf8c6c21808032769a56ccb596f9d7226e5dbbf689b3dc5f91013087e
-
SHA512
1583397cbba9609864a8107f7ee8a7c82d46d63b1e7fcef137855f32c619008f8e84047311d57abab4f03f284ca5405a838ccf97fa9837b5fd69015a92b64718
Score10/10-
Modifies Windows Firewall
-
Drops startup file
-
Adds Run key to start application
-