Overview

overview

10

Static

static

10

5e0033cde5...8e.exe

windows7-x64

8

5e0033cde5...8e.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5e0033cde518b79fac2006ab34068e0958f0b5a5add15f46ba0ea765ab51c38e

  • Size

    37KB

  • Sample

    220731-h861xaede3

  • MD5

    e12037809b4e42c71778a4b4bbc452ca

  • SHA1

    2c58522f0f3a2baec1e6051d2c6555efeb727f5c

  • SHA256

    5e0033cde518b79fac2006ab34068e0958f0b5a5add15f46ba0ea765ab51c38e

  • SHA512

    0784bc7c6c4063b3d15dea52fedba7aff37d1bd0da504772948c67f3016910685e60f2225bba3d8de3cce6001aede3d010370734f940eb85990d403564ab1510

Score
10/10
njrathackedevasion

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

mdmrhm11.ddns.net:5552

Mutex

62ba2f329aea26f149c1780b1258746f

Attributes
  • reg_key

    62ba2f329aea26f149c1780b1258746f

  • splitter

    |'|'|

Targets

    • Target

      5e0033cde518b79fac2006ab34068e0958f0b5a5add15f46ba0ea765ab51c38e

    • Size

      37KB

    • MD5

      e12037809b4e42c71778a4b4bbc452ca

    • SHA1

      2c58522f0f3a2baec1e6051d2c6555efeb727f5c

    • SHA256

      5e0033cde518b79fac2006ab34068e0958f0b5a5add15f46ba0ea765ab51c38e

    • SHA512

      0784bc7c6c4063b3d15dea52fedba7aff37d1bd0da504772948c67f3016910685e60f2225bba3d8de3cce6001aede3d010370734f940eb85990d403564ab1510

    Score
    8/10
    evasion
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Modify Existing Service

1
T1031

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks