General
-
Target
0cc7a8cdad7fc9218a554d2079b11a13cc9d52f845bfb697a2eda03d5f3b39d4
-
Size
31KB
-
Sample
220630-w1p93sfgej
-
MD5
03243a04642c36e309045552cad5ecd6
-
SHA1
9ae11f439b376d56ea5f1cc014f6d97ee0d8fc46
-
SHA256
0cc7a8cdad7fc9218a554d2079b11a13cc9d52f845bfb697a2eda03d5f3b39d4
-
SHA512
6f8d0b3a38dab73a89253b53e608d630594ab0c62d6556b26cfb59cd85514bac41f615bd347b5a2bb8cf175c39e8d5d02fc555e558613ec3e42318f0091c3263
Behavioral task
behavioral1
Sample
0cc7a8cdad7fc9218a554d2079b11a13cc9d52f845bfb697a2eda03d5f3b39d4.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
0cc7a8cdad7fc9218a554d2079b11a13cc9d52f845bfb697a2eda03d5f3b39d4.exe
Resource
win10v2004-20220414-en
Malware Config
Extracted
njrat
0.7d
hack
127.0.0.1:777
e2eb0124833362aa81dbc61961493aaa
-
reg_key
e2eb0124833362aa81dbc61961493aaa
-
splitter
Y262SUCZ4UJJ
Targets
-
-
Target
0cc7a8cdad7fc9218a554d2079b11a13cc9d52f845bfb697a2eda03d5f3b39d4
-
Size
31KB
-
MD5
03243a04642c36e309045552cad5ecd6
-
SHA1
9ae11f439b376d56ea5f1cc014f6d97ee0d8fc46
-
SHA256
0cc7a8cdad7fc9218a554d2079b11a13cc9d52f845bfb697a2eda03d5f3b39d4
-
SHA512
6f8d0b3a38dab73a89253b53e608d630594ab0c62d6556b26cfb59cd85514bac41f615bd347b5a2bb8cf175c39e8d5d02fc555e558613ec3e42318f0091c3263
Score10/10-
Modifies Windows Firewall
-
Drops startup file
-
Adds Run key to start application
-