General
-
Target
95b89635d7e70cbfb3927de75fca512f70c0e1969a047eea9978c3d786a3aa0a
-
Size
78KB
-
Sample
220525-akbk4agehl
-
MD5
528376e463b4a4162a2793dd2edc1d3e
-
SHA1
feb346d329280e763f3009b746ec75b22bdd27bb
-
SHA256
95b89635d7e70cbfb3927de75fca512f70c0e1969a047eea9978c3d786a3aa0a
-
SHA512
8ac1afc3d236b66800160e216835c913973301dd377f6c96f1b616a4fa45b935e09cf48618dac78b61913308d7a9ed312f94186573128770e1dc393829481a8c
Behavioral task
behavioral1
Sample
95b89635d7e70cbfb3927de75fca512f70c0e1969a047eea9978c3d786a3aa0a.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
95b89635d7e70cbfb3927de75fca512f70c0e1969a047eea9978c3d786a3aa0a.exe
Resource
win10v2004-20220414-en
Malware Config
Extracted
njrat
0.7.3
Lime
0.tcp.ngrok.io:16424
Client.exe
-
reg_key
Client.exe
-
splitter
12
Targets
-
-
Target
95b89635d7e70cbfb3927de75fca512f70c0e1969a047eea9978c3d786a3aa0a
-
Size
78KB
-
MD5
528376e463b4a4162a2793dd2edc1d3e
-
SHA1
feb346d329280e763f3009b746ec75b22bdd27bb
-
SHA256
95b89635d7e70cbfb3927de75fca512f70c0e1969a047eea9978c3d786a3aa0a
-
SHA512
8ac1afc3d236b66800160e216835c913973301dd377f6c96f1b616a4fa45b935e09cf48618dac78b61913308d7a9ed312f94186573128770e1dc393829481a8c
Score8/10-
Executes dropped EXE
-
Drops startup file
-
Loads dropped DLL
-
Adds Run key to start application
-