Analysis
-
max time kernel
120s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
16/03/2023, 23:49
General
-
Target
njRAT 0.7d Horror Edition/NjRat 0.7D Horror Edition.exe
-
Size
15.4MB
-
MD5
dd411913ab79512e94920f3bb8019334
-
SHA1
463c4fd39c21be32970febd1447fb472b419c89d
-
SHA256
bb35eddc6b3ccc8aae668176a3987be76ca66c3c0c01074e5ee9cd7d145ce6ce
-
SHA512
60c2d87dafa3726e175ec48b1899f3256a1c884b35ed725469f28a403b7a928e67eab2413c187f746887ca588676c94f85b304553824afa9bff6b9805b495d2d
-
SSDEEP
196608:/jTb2kYfaKqgAyoSxX3NYeOu2kYJBnnim//7uVtFZ03MtV0Poiv5m:X3JgA+9ecWBnnim//7w03M4Fv5m
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of FindShellTrayWindow 3 IoCs
-
Suspicious use of SendNotifyMessage 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\njRAT 0.7d Horror Edition\NjRat 0.7D Horror Edition.exe"C:\Users\Admin\AppData\Local\Temp\njRAT 0.7d Horror Edition\NjRat 0.7D Horror Edition.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x518 0x4ec1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
15.4MB
-
Filesize
664KB
-
Filesize
4.8MB
-
Filesize
624KB
-
Filesize
32KB
-
Filesize
304KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
72KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB
-
Filesize
1024KB