Behavioral task
behavioral1
Sample
FREEFREEFREEFREEFREEFREEFREEFREEFREEFREEFREEFREEFREEFREEFREEFREE.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
FREEFREEFREEFREEFREEFREEFREEFREEFREEFREEFREEFREEFREEFREEFREEFREE.exe
Resource
win10v2004-20220414-en
General
-
Target
8578bee074019393973ce7d367e8d7aa040550196446878ffb9c9997a1874ce9
-
Size
16KB
-
MD5
721762471a896b948b481e2180ea4474
-
SHA1
06cb72d468f9ffc3675b69bcc4be983d797dcf9b
-
SHA256
8578bee074019393973ce7d367e8d7aa040550196446878ffb9c9997a1874ce9
-
SHA512
97ce6bb48ac39984a7ace7a2b10fe0556a86a8a6eeacce981e5c7c829011e9eafb143ed98702cca63f3deeb23f490c7a30eef2c904aac7ce4d7f5a494d461aea
-
SSDEEP
384:lLKKxnCqJhIVHhkIXN+Z3lDiPiq5AVWcONJYdVsBIJR1t:lGKlsFmIXIZ39w/AVWckJYdhJRj
Malware Config
Extracted
njrat
im523
Hacker
127.0.0.1:5555
8128672068d64be4401d50bd976d21a0
-
reg_key
8128672068d64be4401d50bd976d21a0
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
8578bee074019393973ce7d367e8d7aa040550196446878ffb9c9997a1874ce9.zip
-
FREEFREEFREEFREEFREEFREEFREEFREEFREEFREEFREEFREEFREEFREEFREEFREE.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ