Behavioral task
behavioral1
Sample
1bbd07d4a64cdfa75f3f051e8e7c457a506a575e545d99d64fd1cf40629efa45.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1bbd07d4a64cdfa75f3f051e8e7c457a506a575e545d99d64fd1cf40629efa45.exe
Resource
win10v2004-20220812-en
General
-
Target
1bbd07d4a64cdfa75f3f051e8e7c457a506a575e545d99d64fd1cf40629efa45
-
Size
23KB
-
MD5
04e3b87130c67e8ab608dd3cb22b874f
-
SHA1
500485a8bb9c5f48958f3d1f4d7dbfc7a4f644a0
-
SHA256
1bbd07d4a64cdfa75f3f051e8e7c457a506a575e545d99d64fd1cf40629efa45
-
SHA512
10fa886dd9da4c1c9c02f3ddd2cf8d3ff31387a9d33c5340bba5cacc5415f5dd155deca7e3f16eddfaad98ee3fa5e339f198b331e8d78f2e8436a5e2836656ff
-
SSDEEP
384:S8aZYC9twBNdcvFaly2H0dbJo6HghcASEJqc/ZmRvR6JZlbw8hqIusZzZmjQ:MY+sNKqNHnSdRpcnuzM
Malware Config
Extracted
njrat
0.7d
HacKed
xttapsha.ddns.net:5552
0b78b0a128a0e6469faaa71ac7bcf5e3
-
reg_key
0b78b0a128a0e6469faaa71ac7bcf5e3
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
1bbd07d4a64cdfa75f3f051e8e7c457a506a575e545d99d64fd1cf40629efa45.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ