Behavioral task
behavioral1
Sample
73d3fb61e35c27f4ff2ae48656970cb1.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
73d3fb61e35c27f4ff2ae48656970cb1.exe
Resource
win10v2004-20221111-en
General
-
Target
73d3fb61e35c27f4ff2ae48656970cb1.exe
-
Size
37KB
-
MD5
73d3fb61e35c27f4ff2ae48656970cb1
-
SHA1
f380317f9b88842abdee96987b58e16003df0743
-
SHA256
9cb182e757001c4ceb9d4feb31f1038014569098eb3044c2fd8715a788a1dc56
-
SHA512
1417eed6a746888e5f116a68dfc3c3bf3d13a869b0257c9bb0d3409885cb1b03d1c4e494c4e3e8f2c6c93a2bf4678d32d129cc119eba0eb608e32cfffbf8a9b8
-
SSDEEP
384:eytcaCisp/WRdL5kyc/rCH1hngC+hgrAF+rMRTyN/0L+EcoinblneHQM3epzXdNy:ftcOD5nc/rCPd+KrM+rMRa8NurUt
Malware Config
Extracted
njrat
im523
LOL EZ
6.tcp.eu.ngrok.io:18280
c83dd82f2d178ed25b7cb1c9e9774d60
-
reg_key
c83dd82f2d178ed25b7cb1c9e9774d60
-
splitter
|'|'|
Signatures
-
Njrat family
Files
-
73d3fb61e35c27f4ff2ae48656970cb1.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ