General
-
Target
payload.exe
-
Size
27KB
-
Sample
220802-zw6caabch2
-
MD5
719586d8b62ee3203fafc4834472c722
-
SHA1
8668e69c2eadf4087f56cd4ad5f30b5a960abfb3
-
SHA256
a4eb32f9273e31ef4f46e2a7036cd89aa35e8fe8aa0b67982b0c149d30e88590
-
SHA512
6e667e3e75a5f682c7b16d2cf31b30d0019f708efe9c00011e793d3b2b71ad592638911ced815aeb4d14ca356e11c88ba7ed4c6eef3181650e849aa2fd27ec34
Behavioral task
behavioral1
Sample
payload.exe
Resource
win7-20220715-en
Behavioral task
behavioral2
Sample
payload.exe
Resource
win10v2004-20220721-en
Malware Config
Extracted
njrat
v2.0
HacKed
full-qui.at.playit.gg:14457
Windows
-
reg_key
Windows
-
splitter
|-F-|
Targets
-
-
Target
payload.exe
-
Size
27KB
-
MD5
719586d8b62ee3203fafc4834472c722
-
SHA1
8668e69c2eadf4087f56cd4ad5f30b5a960abfb3
-
SHA256
a4eb32f9273e31ef4f46e2a7036cd89aa35e8fe8aa0b67982b0c149d30e88590
-
SHA512
6e667e3e75a5f682c7b16d2cf31b30d0019f708efe9c00011e793d3b2b71ad592638911ced815aeb4d14ca356e11c88ba7ed4c6eef3181650e849aa2fd27ec34
Score7/10-
Drops startup file
-
Adds Run key to start application
-