Overview

overview

10

Static

static

10

2a103cb84a...2a.exe

windows7-x64

8

2a103cb84a...2a.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f5d230103912e9b6015bf917e5831375.bin

  • Size

    16KB

  • Sample

    230320-b88feabc44

  • MD5

    1badf2d699c20deb021ec83de7a32912

  • SHA1

    ba7acd430f3d3a87a0bfe5f83a408a467f756e25

  • SHA256

    c3e872b2491a055e93ca3b059d87991f60f02c45fc3b3100d355bdd05c1ca443

  • SHA512

    004ddc782a681225ec417b8fc779ac29ebd0d4c52f099c0feea7ac4193d6e82b9a7128046b498c2cc6c7b6113a21964fb7687566229c7b7d24177da684941687

  • SSDEEP

    384:O2aItdOBQb5kUY9p4I8uvDpuoF3WKIKiSq8EcWO344eIsRWdC:Ov6H5Sj8uZ3kg/xWOhCWdC

Score
10/10
njrathackedevasion

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

212.187.4.161:3232

Mutex

6bf55e0177bd5d9e7a5d6196e0752083

Attributes
  • reg_key

    6bf55e0177bd5d9e7a5d6196e0752083

  • splitter

    |'|'|

Targets

    • Target

      2a103cb84af50753e1728ec5190e4b9b9c8583f602b4e9f775f0ff9ca1a9272a.exe

    • Size

      37KB

    • MD5

      f5d230103912e9b6015bf917e5831375

    • SHA1

      8e50f734b5156b9a8afdcd83a4beed3442c0ae39

    • SHA256

      2a103cb84af50753e1728ec5190e4b9b9c8583f602b4e9f775f0ff9ca1a9272a

    • SHA512

      517beef42844fad8dfbefab0d8b1bd9f753be16ffb5eee53f4f72a4d124c22e262285b22b6ad3c0af4eb7ea54582c69c635706783b6fe68a0e89765d0f9555a8

    • SSDEEP

      384:Q6U+yw7BeAaXaEiVbzdmB0O4yUvNixgp+Z2v/RYJ/oM6IxrAF+rMRTyN/0L+EcoQ:Jryw79POTUvNZYv64rM+rMRa8NuHvt

    Score
    8/10
    evasion
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Modify Existing Service

1
T1031

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks