Behavioral task
behavioral1
Sample
Client.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
Client.exe
Resource
win10v2004-20221111-en
General
-
Target
Client.exe
-
Size
31KB
-
MD5
89722d85138a560c2576097757ddcf1f
-
SHA1
d4d0e8e6635141438271087e606c5a5225aa57a4
-
SHA256
f3ce785d31175deab8e61299e5d0e4f080dc924a43756189b6be5f5a35851af1
-
SHA512
ffa7ef91a0e11ace41670f2edd7d2d99f8f797ed3f2e2fb1390b3d242032572b793e541a367115ca1488a87e334d6a5650333653fce0d9f78682e02bb4cbaea3
-
SSDEEP
768:5gS5EZYQnk6zxV+hXVCfIdbvilWQmIDUu0tiSQj:fY/SpvQVkij
Malware Config
Extracted
njrat
0.7d
da real nigga
mingrelian.ddns.net:5552
9cd6f1ba7caeaf27161a19823b1fb0d5
-
reg_key
9cd6f1ba7caeaf27161a19823b1fb0d5
-
splitter
Y262SUCZ4UJJ
Signatures
-
Njrat family
Files
-
Client.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ