General
-
Target
3634048707083bfcd9ab1f27f0bf0420b261eaaa40ecc9c86ef3758262614b7b
-
Size
23KB
-
Sample
220626-dtn5bsfadn
-
MD5
55bc0ba7e8f548de834a7090d6d08ab4
-
SHA1
93b660785a6e89f98d2ef8f4145e916410e7475f
-
SHA256
3634048707083bfcd9ab1f27f0bf0420b261eaaa40ecc9c86ef3758262614b7b
-
SHA512
d569cd8d541639b53fd0ce0724e94bcb137859470a83bcad6dbf142f2d5bd23d741ebdece09bb2c4cf7516c94a2e8c1934bd3bef37b9efb68efbf9eed00932bf
Static task
static1
Behavioral task
behavioral1
Sample
3634048707083bfcd9ab1f27f0bf0420b261eaaa40ecc9c86ef3758262614b7b.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
3634048707083bfcd9ab1f27f0bf0420b261eaaa40ecc9c86ef3758262614b7b.exe
Resource
win10v2004-20220414-en
Malware Config
Extracted
njrat
0.7d
Thank you for installing!
127.0.0.1:1528
769d5da68f5544d1b5dd487359601c51
-
reg_key
769d5da68f5544d1b5dd487359601c51
-
splitter
|'|'|
Targets
-
-
Target
3634048707083bfcd9ab1f27f0bf0420b261eaaa40ecc9c86ef3758262614b7b
-
Size
23KB
-
MD5
55bc0ba7e8f548de834a7090d6d08ab4
-
SHA1
93b660785a6e89f98d2ef8f4145e916410e7475f
-
SHA256
3634048707083bfcd9ab1f27f0bf0420b261eaaa40ecc9c86ef3758262614b7b
-
SHA512
d569cd8d541639b53fd0ce0724e94bcb137859470a83bcad6dbf142f2d5bd23d741ebdece09bb2c4cf7516c94a2e8c1934bd3bef37b9efb68efbf9eed00932bf
-
Executes dropped EXE
-
Modifies Windows Firewall
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Loads dropped DLL
-
Adds Run key to start application
-