General
-
Target
8CB915D7C533BA97E0DA2BE371DEE85A8C79BC3B59B93.exe
-
Size
23KB
-
Sample
220708-cp6yxafce2
-
MD5
79df9b67b95e3ab2aab1943199ff62bf
-
SHA1
5bb95763f9a5568bab0a30253eacf4781709038f
-
SHA256
8cb915d7c533ba97e0da2be371dee85a8c79bc3b59b9307987c32b4afd1d7ff0
-
SHA512
ef41a92468cac0604ad1e9b8bed95c6892cd421eead9faf0a668dc604c4f5f71c507aeb9ac284d162d605ab433ce11687f8a3aff8a2840cbbb852351e038523f
Static task
static1
Behavioral task
behavioral1
Sample
8CB915D7C533BA97E0DA2BE371DEE85A8C79BC3B59B93.exe
Resource
win7-20220414-en
Malware Config
Extracted
njrat
0.7d
55555555555
cihan05.duckdns.org:1954
64943d0f79b2379155de3b5ae44be8c4
-
reg_key
64943d0f79b2379155de3b5ae44be8c4
-
splitter
|'|'|
Targets
-
-
Target
8CB915D7C533BA97E0DA2BE371DEE85A8C79BC3B59B93.exe
-
Size
23KB
-
MD5
79df9b67b95e3ab2aab1943199ff62bf
-
SHA1
5bb95763f9a5568bab0a30253eacf4781709038f
-
SHA256
8cb915d7c533ba97e0da2be371dee85a8c79bc3b59b9307987c32b4afd1d7ff0
-
SHA512
ef41a92468cac0604ad1e9b8bed95c6892cd421eead9faf0a668dc604c4f5f71c507aeb9ac284d162d605ab433ce11687f8a3aff8a2840cbbb852351e038523f
-
suricata: ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)
suricata: ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)
-
Modifies Windows Firewall
-