Analysis
-
max time kernel
152s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
-
submitted
16/03/2023, 23:49
General
-
Target
njRAT 0.7d Horror Edition/Plugin/Screamer3.exe
-
Size
280KB
-
MD5
dedabad13c1c4cc92c4ed2122473eb8a
-
SHA1
a13385641ddcbdc371dce3607381883d52ed9822
-
SHA256
5dc4f19b34a738b4eef99c1229b2c7e7492040819d92ddbbf52bbde2a600c2ed
-
SHA512
45b66665cb3e484c82775c9972f444b1d8fe6f7ef5a55185a3c071f84e9f5dd2a039c9f9e26392e950585cbf965b987df9c789106bddcb35ee55ad0ff91b190b
-
SSDEEP
6144:gk8SnpZqjGNklsppH1eSqkeJRH91FHlHH:gvgZqJmTeSqkeJ
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\njRAT 0.7d Horror Edition\Plugin\Screamer3.exe"C:\Users\Admin\AppData\Local\Temp\njRAT 0.7d Horror Edition\Plugin\Screamer3.exe"1⤵
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x2c8 0x1501⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
-
Filesize
304KB
-
Filesize
664KB
-
Filesize
4.8MB
-
Filesize
624KB
-
Filesize
32KB
-
Filesize
304KB
-
Filesize
64KB
-
Filesize
64KB