General
-
Target
b39589d6427aa2666b54f1b09cfeae25fd62c135293688cc91e854ac3097a898
-
Size
32KB
-
Sample
220524-t3x2laddfj
-
MD5
e2e21e957f11bdeece53d32ef7a87200
-
SHA1
163e343f1145112c70b9dfb769e1edd95aeea727
-
SHA256
b39589d6427aa2666b54f1b09cfeae25fd62c135293688cc91e854ac3097a898
-
SHA512
dd3befe3490377cb89a56b7096f9c0cf77632656940b0c8153d50b28d1e030fcd624a1ecb5b99e9248ef3f086505753778997fdf7b7f15d3855279781a9154da
Static task
static1
Behavioral task
behavioral1
Sample
b39589d6427aa2666b54f1b09cfeae25fd62c135293688cc91e854ac3097a898.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
b39589d6427aa2666b54f1b09cfeae25fd62c135293688cc91e854ac3097a898.exe
Resource
win10v2004-20220414-en
Malware Config
Extracted
njrat
Hacked By HiDDen PerSOn
4bdd702755ab14d7cb87b9060eac7a2c
-
reg_key
4bdd702755ab14d7cb87b9060eac7a2c
Targets
-
-
Target
b39589d6427aa2666b54f1b09cfeae25fd62c135293688cc91e854ac3097a898
-
Size
32KB
-
MD5
e2e21e957f11bdeece53d32ef7a87200
-
SHA1
163e343f1145112c70b9dfb769e1edd95aeea727
-
SHA256
b39589d6427aa2666b54f1b09cfeae25fd62c135293688cc91e854ac3097a898
-
SHA512
dd3befe3490377cb89a56b7096f9c0cf77632656940b0c8153d50b28d1e030fcd624a1ecb5b99e9248ef3f086505753778997fdf7b7f15d3855279781a9154da
-
Executes dropped EXE
-
Modifies Windows Firewall
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Loads dropped DLL
-
Adds Run key to start application
-