Behavioral task
behavioral1
Sample
be6c6a95b4acd7651fad7520a8060ad33ab81672ec8c361671a52570313598fb.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
be6c6a95b4acd7651fad7520a8060ad33ab81672ec8c361671a52570313598fb.exe
Resource
win10v2004-20220812-en
General
-
Target
be6c6a95b4acd7651fad7520a8060ad33ab81672ec8c361671a52570313598fb
-
Size
23KB
-
MD5
d6d54d0f57da5a4eeacbe49831e3a2af
-
SHA1
68f8d062f2117760a3ac8cc5f56436623e8eaaf1
-
SHA256
be6c6a95b4acd7651fad7520a8060ad33ab81672ec8c361671a52570313598fb
-
SHA512
f579160304d1657c9d1a93366f3fad49a1b26a2bd754d48cafe6f347385a16a4bbecfe2d9612caa44a9ee2140622458064ad34e1afb9a46dfb5143013f864b85
-
SSDEEP
384:P8aZYC9twBNdcvFaly2H0dbJo6HghcASEJqc/ZmRvR6JZlbw8hqIusZzZbV2:DY+sNKqNHnSdRpcnuT
Malware Config
Extracted
njrat
0.7d
HacKed amine
127.0.0.1:1177
0b323478001c5edc6259d896c8157e8e
-
reg_key
0b323478001c5edc6259d896c8157e8e
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
be6c6a95b4acd7651fad7520a8060ad33ab81672ec8c361671a52570313598fb.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ