Overview

overview

10

Static

static

10

1544-89-0x...ry.exe

windows7-x64

1544-89-0x...ry.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1544-89-0x0000000000400000-0x000000000040C000-memory.dmp

  • Size

    48KB

  • Sample

    230406-hddqwadg2v

  • MD5

    789e96e87b1b3427995234e2ad876b67

  • SHA1

    527105931c7eb4d2b4715438dc8e9f8719b3664c

  • SHA256

    ceaec041317fbc5044d8168892735d17920eb4855697ee7ed7e06e4942224b66

  • SHA512

    d5982e462c336da781e828e2a347e2a7cb303b07979ee93c259c7f44215804b688f6aba0aab837bd48eb0984acd0a353c94230ded047bc8e9b8ab17980f19696

  • SSDEEP

    384:w8aLWS0dABLYVq6RxP8MDFF09vK563gRMmJKUv0mRvR6JZlbw8hqIusZzZcvg:/Xcwt3tRpcnuxo

Score
10/10
njrathacked

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

109.206.243.59:4444

Mutex

167d229cd9c981018cf48a214b56b50d

Attributes
  • reg_key

    167d229cd9c981018cf48a214b56b50d

  • splitter

    |'|'|

Targets

    • Target

      1544-89-0x0000000000400000-0x000000000040C000-memory.dmp

    • Size

      48KB

    • MD5

      789e96e87b1b3427995234e2ad876b67

    • SHA1

      527105931c7eb4d2b4715438dc8e9f8719b3664c

    • SHA256

      ceaec041317fbc5044d8168892735d17920eb4855697ee7ed7e06e4942224b66

    • SHA512

      d5982e462c336da781e828e2a347e2a7cb303b07979ee93c259c7f44215804b688f6aba0aab837bd48eb0984acd0a353c94230ded047bc8e9b8ab17980f19696

    • SSDEEP

      384:w8aLWS0dABLYVq6RxP8MDFF09vK563gRMmJKUv0mRvR6JZlbw8hqIusZzZcvg:/Xcwt3tRpcnuxo

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks