Overview

overview

10

Static

static

10

49c0e3bbb5...90.exe

windows7_x64

8

49c0e3bbb5...90.exe

windows10-2004_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    49c0e3bbb59d81bad201d19c17c77a77f12253be70782b409d57cd2c4df7d190

  • Size

    37KB

  • Sample

    220701-h2wllabae6

  • MD5

    555c42a4d6cee75f5b74bb20ff6dc65c

  • SHA1

    9b5856345e889808b23bb4e1408684d7082c7b08

  • SHA256

    49c0e3bbb59d81bad201d19c17c77a77f12253be70782b409d57cd2c4df7d190

  • SHA512

    995de3f70a892312b0c50d219e9c40e508811be5e486d8c71e075197d2e070bf31acc66baa07d392db0fed9c8bf185e88b9dc8a277deadbadbc7df12ff9f044d

Score
10/10
njratroblox cheat.exeevasion

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

Roblox Cheat.exe

C2

127.0.0.1,127.0.0.1,127.0.0.1,127.0.0.1,,433.0.0.1,127.0.0.1:200

Mutex

bcbd8419906332378eec2f06c03cd62e

Attributes
  • reg_key

    bcbd8419906332378eec2f06c03cd62e

  • splitter

    |'|'|

Targets

    • Target

      49c0e3bbb59d81bad201d19c17c77a77f12253be70782b409d57cd2c4df7d190

    • Size

      37KB

    • MD5

      555c42a4d6cee75f5b74bb20ff6dc65c

    • SHA1

      9b5856345e889808b23bb4e1408684d7082c7b08

    • SHA256

      49c0e3bbb59d81bad201d19c17c77a77f12253be70782b409d57cd2c4df7d190

    • SHA512

      995de3f70a892312b0c50d219e9c40e508811be5e486d8c71e075197d2e070bf31acc66baa07d392db0fed9c8bf185e88b9dc8a277deadbadbc7df12ff9f044d

    Score
    8/10
    evasion
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Modify Existing Service

1
T1031

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks