General
-
Target
1e0c4d9b5345edd30b1e6bafd7978268529e16df41a43a0c4ef69829262372e6
-
Size
25KB
-
Sample
220520-faccjadbcn
-
MD5
d21cec2628060e57eda752fe747514af
-
SHA1
b1f4f83039562dd23eb9722007a7fce9b25e93ae
-
SHA256
1e0c4d9b5345edd30b1e6bafd7978268529e16df41a43a0c4ef69829262372e6
-
SHA512
3a7282e64d835709a7388d3319e2143e78000a0411acdeec8e86a5f6c24ba21777e60d5babd36b994de188ac95601e365f3e25d45c1e0873512551c0a95db859
Static task
static1
Behavioral task
behavioral1
Sample
1e0c4d9b5345edd30b1e6bafd7978268529e16df41a43a0c4ef69829262372e6.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
1e0c4d9b5345edd30b1e6bafd7978268529e16df41a43a0c4ef69829262372e6.exe
Resource
win10v2004-20220414-en
Malware Config
Extracted
njrat
Njrat 0.7 Golden By Hassan Amiri
HacKed
127.0.0.1:5552
Windows Update
-
reg_key
Windows Update
-
splitter
|Hassan|
Targets
-
-
Target
1e0c4d9b5345edd30b1e6bafd7978268529e16df41a43a0c4ef69829262372e6
-
Size
25KB
-
MD5
d21cec2628060e57eda752fe747514af
-
SHA1
b1f4f83039562dd23eb9722007a7fce9b25e93ae
-
SHA256
1e0c4d9b5345edd30b1e6bafd7978268529e16df41a43a0c4ef69829262372e6
-
SHA512
3a7282e64d835709a7388d3319e2143e78000a0411acdeec8e86a5f6c24ba21777e60d5babd36b994de188ac95601e365f3e25d45c1e0873512551c0a95db859
Score10/10-
Executes dropped EXE
-
Adds Run key to start application
-