Behavioral task
behavioral1
Sample
73ed1e82979f64c738cd14ddb41bd969363e40b690ba491fe144e5dff50ac69c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
73ed1e82979f64c738cd14ddb41bd969363e40b690ba491fe144e5dff50ac69c.exe
Resource
win10v2004-20221111-en
General
-
Target
73ed1e82979f64c738cd14ddb41bd969363e40b690ba491fe144e5dff50ac69c
-
Size
152KB
-
MD5
763028028b41d23e27fd5ea05c66378e
-
SHA1
312347097cfad997d0b22eda04c4dd8759d786bc
-
SHA256
73ed1e82979f64c738cd14ddb41bd969363e40b690ba491fe144e5dff50ac69c
-
SHA512
9a915dde6b3aec00eb8e931fae12de6ac48178d8b56ff964ca9814cd835fe9dc35337c5a6cface2b7b03712bd3e836910b502146855ec27070f05fffc5a06274
-
SSDEEP
1536:S589Z5RWuuNLER+qxlLaeCpByJ2xcFLKOGTZ3xpxQ:w8930eRfGvyYxcFLqxA
Malware Config
Extracted
njrat
0.7d
HacKed
robinhood122333.no-ip.biz:5552
ae05d203144696f66006208e801d7263
-
reg_key
ae05d203144696f66006208e801d7263
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
73ed1e82979f64c738cd14ddb41bd969363e40b690ba491fe144e5dff50ac69c.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 129KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ