Behavioral task
behavioral1
Sample
073869f6916ea44677e40d5186bda961.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
073869f6916ea44677e40d5186bda961.exe
Resource
win10v2004-20220901-en
General
-
Target
073869f6916ea44677e40d5186bda961.exe
-
Size
37KB
-
MD5
073869f6916ea44677e40d5186bda961
-
SHA1
f383b64329fd19115ad8587e8a9154cf1093ab3b
-
SHA256
af8ac614d751b198b1fd00e75a99741d9190520dbd7825a395443354d8c8cc1a
-
SHA512
01719f7c9569ad371c0ad197310acab7e6d670d20c868e018fb031ced840d3ab0e2828b908821740123949fe681a5664f0e49d48c05168d562af83665561a9b8
-
SSDEEP
384:gFBZkitgZf5W9cTYXyc/SKlMA+zfzQnssItSrAF+rMRTyN/0L+EcoinblneHQM3K:2ByjjTYic/SKq8ssIErM+rMRa8Nujrt
Malware Config
Extracted
njrat
im523
HacKed
4.tcp.eu.ngrok.io:11814
556f30eecd77380f1e650174143e5dec
-
reg_key
556f30eecd77380f1e650174143e5dec
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
073869f6916ea44677e40d5186bda961.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ