General
- Target bIA0.exe
- Size 36KB
- Sample230106-tk7s3shb52
- SHA256 a197bb8b0d29a6b7c273c0474448ca4c5393e5cc4a178ffe1c50abe2da4bbb96
- MD5 17c348614f569c5754fab76396cd9cfb
- SHA1 4e75c7154f981597b802f7dd579287dad2bfc478
- SHA512 884df9fc7c6fd3c058b3db1400ac4c5ffd9b0b6188bc1b1c6ae2cbd8945aa1de5acac021dbce9d54e9975b4ba2039f675c4261482b4202a3bee0c36226cb0430
- SSDEEP 384:HLh74EY7AnNlxlehKNOYUiIRdG5DrvvOY2OzRLTm3yilqq6xseeSvN:rGEYW3reOE+5DjOsFLvN
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
bIA0.exe
Resource
win7-20221111-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
0.7d By Pjoao1578
Botnet
-
HacKed
C2
-
https://pastebin.com/raw/HEFUfAcq:5552
Mutex
-
6a2634340fbf8a0a2c038c6263d49fd1
Attributes
-
reg_key
6a2634340fbf8a0a2c038c6263d49fd1
-
splitter
|'|'|
Targets
-
- Target bIA0.exe
- Size 36KB
- SHA256 a197bb8b0d29a6b7c273c0474448ca4c5393e5cc4a178ffe1c50abe2da4bbb96
- MD5 17c348614f569c5754fab76396cd9cfb
- SHA1 4e75c7154f981597b802f7dd579287dad2bfc478
- SHA512 884df9fc7c6fd3c058b3db1400ac4c5ffd9b0b6188bc1b1c6ae2cbd8945aa1de5acac021dbce9d54e9975b4ba2039f675c4261482b4202a3bee0c36226cb0430
- SSDEEP 384:HLh74EY7AnNlxlehKNOYUiIRdG5DrvvOY2OzRLTm3yilqq6xseeSvN:rGEYW3reOE+5DjOsFLvN
- MD5 SHA1 SHA512 SSDEEP
Deletes itself
Legitimate hosting services abused for malware hosting/C2