General
-
Target
7b7c288ca4735bd9056751ec9a307899ebe864418446fd23396666297cee3dd7
-
Size
104KB
-
Sample
221124-3c4k5afc27
-
MD5
28a7d4e2b5f033f4f33791f32c6e9fad
-
SHA1
c14648e59b09f70800e94b715a82a0a1c9022973
-
SHA256
7b7c288ca4735bd9056751ec9a307899ebe864418446fd23396666297cee3dd7
-
SHA512
a6ca99a32132ce326131f22176b8aba0a2c2a2801c3db301c64a5f6ec1f4f456a4d2cdd89b7c0bc4b4c96ca9c313c15777f6aed12d719f1482c0009e7c5960fd
-
SSDEEP
1536:hS06taZRfWxSdh3Hm/ukxj6CB4Y/2ugu39o4loYFusUuoub5IgRefP:n6taqxq3H326CB3NoRsUuo45fg
Static task
static1
Behavioral task
behavioral1
Sample
7b7c288ca4735bd9056751ec9a307899ebe864418446fd23396666297cee3dd7.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
7b7c288ca4735bd9056751ec9a307899ebe864418446fd23396666297cee3dd7.exe
Resource
win10v2004-20220901-en
Malware Config
Extracted
njrat
0.6.4
HacKed
127.0.0.1:1177
5cd8f17f4086744065eb0992a09e05a2
-
reg_key
5cd8f17f4086744065eb0992a09e05a2
-
splitter
|'|'|
Targets
-
-
Target
7b7c288ca4735bd9056751ec9a307899ebe864418446fd23396666297cee3dd7
-
Size
104KB
-
MD5
28a7d4e2b5f033f4f33791f32c6e9fad
-
SHA1
c14648e59b09f70800e94b715a82a0a1c9022973
-
SHA256
7b7c288ca4735bd9056751ec9a307899ebe864418446fd23396666297cee3dd7
-
SHA512
a6ca99a32132ce326131f22176b8aba0a2c2a2801c3db301c64a5f6ec1f4f456a4d2cdd89b7c0bc4b4c96ca9c313c15777f6aed12d719f1482c0009e7c5960fd
-
SSDEEP
1536:hS06taZRfWxSdh3Hm/ukxj6CB4Y/2ugu39o4loYFusUuoub5IgRefP:n6taqxq3H326CB3NoRsUuo45fg
Score10/10-
Executes dropped EXE
-
Modifies Windows Firewall
-
Drops startup file
-
Loads dropped DLL
-
Adds Run key to start application
-