General
-
Target
f550457c23841e5636aef2469c876087d06a6bb76501a005b66a0a1ac1a6409e
-
Size
29KB
-
Sample
220521-mmmglacad8
-
MD5
7746b6783596d71ab36d36e24a843472
-
SHA1
677e119ee72f5b1570380da1e0780941e8b3465c
-
SHA256
f550457c23841e5636aef2469c876087d06a6bb76501a005b66a0a1ac1a6409e
-
SHA512
17e6edeccfb7c546ff7aa32e3078f364eec2f755d5b120bc4b2fcf4b9a3c9095a79811278906c24285760d060c1dc2aa42ea7a57de87e60d3f3eb825eb67d450
Behavioral task
behavioral1
Sample
f550457c23841e5636aef2469c876087d06a6bb76501a005b66a0a1ac1a6409e.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
f550457c23841e5636aef2469c876087d06a6bb76501a005b66a0a1ac1a6409e.exe
Resource
win10v2004-20220414-en
Malware Config
Extracted
njrat
0.6.4
999
falcon-56657.portmap.host:56657
5cd8f17f4086744065eb0992a09e05a2
-
reg_key
5cd8f17f4086744065eb0992a09e05a2
-
splitter
|'|'|
Targets
-
-
Target
f550457c23841e5636aef2469c876087d06a6bb76501a005b66a0a1ac1a6409e
-
Size
29KB
-
MD5
7746b6783596d71ab36d36e24a843472
-
SHA1
677e119ee72f5b1570380da1e0780941e8b3465c
-
SHA256
f550457c23841e5636aef2469c876087d06a6bb76501a005b66a0a1ac1a6409e
-
SHA512
17e6edeccfb7c546ff7aa32e3078f364eec2f755d5b120bc4b2fcf4b9a3c9095a79811278906c24285760d060c1dc2aa42ea7a57de87e60d3f3eb825eb67d450
Score8/10-
Modifies Windows Firewall
-
Adds Run key to start application
-