Overview

overview

10

Static

static

10

b7a78039c2...e2.exe

windows7-x64

8

b7a78039c2...e2.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b7a78039c28b0651b98e724e467b7ae2.exe

  • Size

    93KB

  • Sample

    230606-1z2zpsge2s

  • MD5

    b7a78039c28b0651b98e724e467b7ae2

  • SHA1

    ec86bf60519e232be075af5f3adc11464e5ac35d

  • SHA256

    76a792f785b44066a7b802ef54cb979562357151be7e4eb5624dc929799603ba

  • SHA512

    bfee74ee135312163e06ee13bece5459b25065b28796e1bef1f03101a46ec0f5090a5318aa21dd51e2c167f39ed1993c54799eb15a36c33365ef40fd7eaadd73

  • SSDEEP

    1536:nUNJD/HBZbszKu9AZp77r1jEwzGi1dDswDxgS:nUUzK4AZtHCi1dDu

Score
10/10
njratsxdwe2evasion

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

sxDWE2

C2

c2NoZWR1bGUtbW9ydGdhZ2VzLmF0LnBseS5nZwStrikStrik:MTcwNTc=

Mutex

cb410b9cd087a1b0098ca8fb8248c6e8

Attributes
  • reg_key

    cb410b9cd087a1b0098ca8fb8248c6e8

  • splitter

    |'|'|

Targets

    • Target

      b7a78039c28b0651b98e724e467b7ae2.exe

    • Size

      93KB

    • MD5

      b7a78039c28b0651b98e724e467b7ae2

    • SHA1

      ec86bf60519e232be075af5f3adc11464e5ac35d

    • SHA256

      76a792f785b44066a7b802ef54cb979562357151be7e4eb5624dc929799603ba

    • SHA512

      bfee74ee135312163e06ee13bece5459b25065b28796e1bef1f03101a46ec0f5090a5318aa21dd51e2c167f39ed1993c54799eb15a36c33365ef40fd7eaadd73

    • SSDEEP

      1536:nUNJD/HBZbszKu9AZp77r1jEwzGi1dDswDxgS:nUUzK4AZtHCi1dDu

    Score
    8/10
    evasion
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Modify Existing Service

1
T1031

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks