General
-
Target
cf5842ccd42db3f8dd67df5c6dfc6dded85ad75f402751be3c4e9e5f29e58103
-
Size
31KB
-
Sample
220523-z4sq6acack
-
MD5
cf1e69d75b4678bd30ba449401dbea51
-
SHA1
7db96a0029285e73993190f165b6ce31c9ec6a2a
-
SHA256
cf5842ccd42db3f8dd67df5c6dfc6dded85ad75f402751be3c4e9e5f29e58103
-
SHA512
593e567aadb4f90fd120d1ff768f23db9e3a310ad5861c897802866fbeb0c841479b1285d8282756f4179d6b4d208d0d70a00c6eae256099263041837e6d42ad
Behavioral task
behavioral1
Sample
cf5842ccd42db3f8dd67df5c6dfc6dded85ad75f402751be3c4e9e5f29e58103.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
cf5842ccd42db3f8dd67df5c6dfc6dded85ad75f402751be3c4e9e5f29e58103.exe
Resource
win10v2004-20220414-en
Malware Config
Extracted
njrat
0.7d
Bot
127.0.0.1:6522
e0bc912040dccb7aa777799ab687565b
-
reg_key
e0bc912040dccb7aa777799ab687565b
-
splitter
Y262SUCZ4UJJ
Targets
-
-
Target
cf5842ccd42db3f8dd67df5c6dfc6dded85ad75f402751be3c4e9e5f29e58103
-
Size
31KB
-
MD5
cf1e69d75b4678bd30ba449401dbea51
-
SHA1
7db96a0029285e73993190f165b6ce31c9ec6a2a
-
SHA256
cf5842ccd42db3f8dd67df5c6dfc6dded85ad75f402751be3c4e9e5f29e58103
-
SHA512
593e567aadb4f90fd120d1ff768f23db9e3a310ad5861c897802866fbeb0c841479b1285d8282756f4179d6b4d208d0d70a00c6eae256099263041837e6d42ad
Score8/10-
Modifies Windows Firewall
-
Drops startup file
-
Adds Run key to start application
-