General
-
Target
2186c26890cc8d273da59e094412d4f6014c23cf727c3a3e39a1c6327915dcda
-
Size
23KB
-
Sample
221128-xx1r3sea9x
-
MD5
63526a3183906af15e6d4ccb6aaffd09
-
SHA1
ba08e63cd96404fb89398a4eac88d680154c1253
-
SHA256
2186c26890cc8d273da59e094412d4f6014c23cf727c3a3e39a1c6327915dcda
-
SHA512
3c0a70d2542b7545b138c5d7c35d24adc23cd8a392a062cec6c4a4c459c2b1df0d2706265593668392e07df4686e06d3521d4af3f0eb4980660edd84688cec43
-
SSDEEP
384:ZQeCo2zmZbQHkJeCdUwBvQ61gjuQBnB9mRvR6JZlbw8hqIusZzZfo:+5yBVd7Rpcnur
Behavioral task
behavioral1
Sample
2186c26890cc8d273da59e094412d4f6014c23cf727c3a3e39a1c6327915dcda.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
2186c26890cc8d273da59e094412d4f6014c23cf727c3a3e39a1c6327915dcda.exe
Resource
win10v2004-20220812-en
Malware Config
Extracted
njrat
0.7d
maga
markben390.no-ip.org:1337
827cda1af440f8bcd9b8db5cfeff595d
-
reg_key
827cda1af440f8bcd9b8db5cfeff595d
-
splitter
|'|'|
Targets
-
-
Target
2186c26890cc8d273da59e094412d4f6014c23cf727c3a3e39a1c6327915dcda
-
Size
23KB
-
MD5
63526a3183906af15e6d4ccb6aaffd09
-
SHA1
ba08e63cd96404fb89398a4eac88d680154c1253
-
SHA256
2186c26890cc8d273da59e094412d4f6014c23cf727c3a3e39a1c6327915dcda
-
SHA512
3c0a70d2542b7545b138c5d7c35d24adc23cd8a392a062cec6c4a4c459c2b1df0d2706265593668392e07df4686e06d3521d4af3f0eb4980660edd84688cec43
-
SSDEEP
384:ZQeCo2zmZbQHkJeCdUwBvQ61gjuQBnB9mRvR6JZlbw8hqIusZzZfo:+5yBVd7Rpcnur
Score10/10-
Modifies Windows Firewall
-
Adds Run key to start application
-