Behavioral task
behavioral1
Sample
275d49b70623887f336f08ff5813ef3ac35554296648caa9f2650b21f8280bfd.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
275d49b70623887f336f08ff5813ef3ac35554296648caa9f2650b21f8280bfd.exe
Resource
win10v2004-20220812-en
General
-
Target
275d49b70623887f336f08ff5813ef3ac35554296648caa9f2650b21f8280bfd
-
Size
23KB
-
MD5
87ae5d4edcb4545d67fb13648d8c6a87
-
SHA1
b030330eb3e86d2d3b7243ddcd1877acc3c2b980
-
SHA256
275d49b70623887f336f08ff5813ef3ac35554296648caa9f2650b21f8280bfd
-
SHA512
d96fb2237ae4a43d14de6382439d90ec9fdec0bd55afb67ae720133dceb29ae60adac094dbcb174b097f0deba03c2ace1be46a4cc8f01a81e8e2d4c796ac9d81
-
SSDEEP
384:Mwz6+T4IjWZFNwXU0eiNUBdvt6lgT+lLOhXxQmRvR6JZlbw8hqIusZzZWv:3TbC81NgRpcnuf
Malware Config
Extracted
njrat
0.7d
HacKed
riyad213.sytes.net:1177
14b7d946f01deea4c03e52f72245f951
-
reg_key
14b7d946f01deea4c03e52f72245f951
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
275d49b70623887f336f08ff5813ef3ac35554296648caa9f2650b21f8280bfd.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ