Overview

overview

10

Static

static

10

HEUR-Troja...71.exe

windows7-x64

8

HEUR-Troja...71.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    HEUR-Trojan.Win32.Generic-4cd9ec4e08542ffeb71.exe

  • Size

    37KB

  • Sample

    220921-sj21rsgef4

  • MD5

    1932439d302e56c637f6e1ae6a994a16

  • SHA1

    3507440117305f02e1b83d0995dddbacd7a36d8e

  • SHA256

    4cd9ec4e08542ffeb71acb653813fe354a23d8960f031d488ff25b54730d5b64

  • SHA512

    1f41b35e5f36709d72496e53322773d5ad167a96081ccfdb70a174a637e9919712d9960d1ef6a7f32ee6ba7948d720bbf1efb1893e21ce38a84d9ac9349576e8

  • SSDEEP

    384:5kNWY2giHF19JvubMcKyMTcyPZITHe2CrAF+rMRTyN/0L+EcoinblneHQM3epzXr:WNWTTvJc5MTcymzehrM+rMRa8NuU6t

Score
10/10
njrathackedevasion

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

2.tcp.ngrok.io:18436

Mutex

8a11f1b8c7b0415eaa52df52bf02a0a7

Attributes
  • reg_key

    8a11f1b8c7b0415eaa52df52bf02a0a7

  • splitter

    |'|'|

Targets

    • Target

      HEUR-Trojan.Win32.Generic-4cd9ec4e08542ffeb71.exe

    • Size

      37KB

    • MD5

      1932439d302e56c637f6e1ae6a994a16

    • SHA1

      3507440117305f02e1b83d0995dddbacd7a36d8e

    • SHA256

      4cd9ec4e08542ffeb71acb653813fe354a23d8960f031d488ff25b54730d5b64

    • SHA512

      1f41b35e5f36709d72496e53322773d5ad167a96081ccfdb70a174a637e9919712d9960d1ef6a7f32ee6ba7948d720bbf1efb1893e21ce38a84d9ac9349576e8

    • SSDEEP

      384:5kNWY2giHF19JvubMcKyMTcyPZITHe2CrAF+rMRTyN/0L+EcoinblneHQM3epzXr:WNWTTvJc5MTcymzehrM+rMRa8NuU6t

    Score
    8/10
    evasion
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Modify Existing Service

1
T1031

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks