Overview

overview

10

Static

static

10

installer.exe

windows7-x64

8

installer.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    installer.exe

  • Size

    37KB

  • Sample

    230320-prryzsfe6v

  • MD5

    d9aaecfddd720609cf1e184629f324cf

  • SHA1

    a5efe468f574d1b25e0b42ea532ed9c8e23d58b1

  • SHA256

    011d9a9d17d657eb4d196d9f40ae350a220e708e301ca0cc8253943b1c79c69e

  • SHA512

    e1da056f310df61710a2a0eba8123a49ed00b2b4053ac7a74fd3947d0809c4a3d2ccc0748ea123b6b6a04904a38482b03046ce09d7b3a726c7253d9976244a79

  • SSDEEP

    384:+KqIiuVjtD+P3V+y0bf2TKtvN4suKfdrAF+rMRTyN/0L+EcoinblneHQM3epzX6D:DNmV10bf2TKtClK1rM+rMRa8NuABt

Score
10/10
njrathackedevasion

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

street-shut.at.ply.gg:14364

Mutex

b8d4df5bbefee2b9c204c096c0de3bc5

Attributes
  • reg_key

    b8d4df5bbefee2b9c204c096c0de3bc5

  • splitter

    |'|'|

Targets

    • Target

      installer.exe

    • Size

      37KB

    • MD5

      d9aaecfddd720609cf1e184629f324cf

    • SHA1

      a5efe468f574d1b25e0b42ea532ed9c8e23d58b1

    • SHA256

      011d9a9d17d657eb4d196d9f40ae350a220e708e301ca0cc8253943b1c79c69e

    • SHA512

      e1da056f310df61710a2a0eba8123a49ed00b2b4053ac7a74fd3947d0809c4a3d2ccc0748ea123b6b6a04904a38482b03046ce09d7b3a726c7253d9976244a79

    • SSDEEP

      384:+KqIiuVjtD+P3V+y0bf2TKtvN4suKfdrAF+rMRTyN/0L+EcoinblneHQM3epzX6D:DNmV10bf2TKtClK1rM+rMRa8NuABt

    Score
    8/10
    evasion
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Modify Existing Service

1
T1031

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks