Behavioral task
behavioral1
Sample
ECBB3B789818591D27F1730DFB72F6021303B7B88E19A.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ECBB3B789818591D27F1730DFB72F6021303B7B88E19A.exe
Resource
win10v2004-20220901-en
General
-
Target
ECBB3B789818591D27F1730DFB72F6021303B7B88E19A.exe
-
Size
301KB
-
MD5
ca67fbb1b2db6af5e9b317d60b3de797
-
SHA1
0d306f19b7b85d4f6550099231381751dee82058
-
SHA256
ecbb3b789818591d27f1730dfb72f6021303b7b88e19ac9c8dbf1366935e7af7
-
SHA512
593bb09d27dd2b9a00b23c2a04746a494c8a649c91a522e92d1e288ca85e7104acf1abff851aa65e85b12f9bba7f1e35e37df7aa144a2c9641a42098e07318ad
-
SSDEEP
768:ZNmV10bf2TKtClK1rM+rMRa8NuLptHqi:ZNmVaD6KtC8u+gRJNs
Malware Config
Extracted
njrat
im523
HacKed
4.tcp.ngrok.io:13648
ef85f0aa7fc5c357737a6a24052fe823
-
reg_key
ef85f0aa7fc5c357737a6a24052fe823
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
ECBB3B789818591D27F1730DFB72F6021303B7B88E19A.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 265KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ