General
-
Target
4347fad2910ef4b38c47457e809b47541a85e096bb0b50ad11642732ea9c8d4e
-
Size
42KB
-
Sample
220707-3em16aacd5
-
MD5
1404b33769e92d21b6ef36aac178978c
-
SHA1
ef71506d26b1faa45cdd9205f0abb649a88a4dd7
-
SHA256
4347fad2910ef4b38c47457e809b47541a85e096bb0b50ad11642732ea9c8d4e
-
SHA512
ba7c4b0ad5a5b083f9d48ca1c1f4c92ba76160e39393fcb7acb056e16695ea504d8116a090e43878f81a3526006b5ac2cd6b1c190f1b22473e3b8e4c4b50e1f1
Static task
static1
Behavioral task
behavioral1
Sample
4347fad2910ef4b38c47457e809b47541a85e096bb0b50ad11642732ea9c8d4e.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
4347fad2910ef4b38c47457e809b47541a85e096bb0b50ad11642732ea9c8d4e.exe
Resource
win10v2004-20220414-en
Malware Config
Extracted
njrat
Njrat 0.7 Golden By Hassan Amiri
fr33Synapze
synapsecracked.duckdns.org:24681
Windows Update
-
reg_key
Windows Update
-
splitter
|Hassan|
Targets
-
-
Target
4347fad2910ef4b38c47457e809b47541a85e096bb0b50ad11642732ea9c8d4e
-
Size
42KB
-
MD5
1404b33769e92d21b6ef36aac178978c
-
SHA1
ef71506d26b1faa45cdd9205f0abb649a88a4dd7
-
SHA256
4347fad2910ef4b38c47457e809b47541a85e096bb0b50ad11642732ea9c8d4e
-
SHA512
ba7c4b0ad5a5b083f9d48ca1c1f4c92ba76160e39393fcb7acb056e16695ea504d8116a090e43878f81a3526006b5ac2cd6b1c190f1b22473e3b8e4c4b50e1f1
Score10/10-
Executes dropped EXE
-
Drops startup file
-
Adds Run key to start application
-