General
-
Target
file.exe
-
Size
93KB
-
Sample
230629-b5kvyabf73
-
MD5
097de0afe9c3cb4bb0b145755b03c4c3
-
SHA1
a8814d5bf9a3549ea52f0ddd65a7ad20cdeabd35
-
SHA256
7b489b2c0652daa155af036c9ff79d55c69815bec3eb3e5d0f8489195ed16af0
-
SHA512
71569b56cd7821c391bc00e20f354e5515c9aead4a7f9dd85fc7afc03a6eb29d89d317f383a819da160ced555525d7321149f1a459d48c1eddee4c15e63a82a9
-
SSDEEP
1536:oUh3wHyNxrBhh5YLg1jEwzGi1dDyDwgS:oUkyNxrBhLggCi1dUZ
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20230621-en
Malware Config
Extracted
njrat
0.7d
HACKER
hakim32.ddns.net:2000
5683812xs-43939.portmap.host:43939
88410830574930bcf2521cc95aeeafe7
-
reg_key
88410830574930bcf2521cc95aeeafe7
-
splitter
|'|'|
Targets
-
-
Target
file.exe
-
Size
93KB
-
MD5
097de0afe9c3cb4bb0b145755b03c4c3
-
SHA1
a8814d5bf9a3549ea52f0ddd65a7ad20cdeabd35
-
SHA256
7b489b2c0652daa155af036c9ff79d55c69815bec3eb3e5d0f8489195ed16af0
-
SHA512
71569b56cd7821c391bc00e20f354e5515c9aead4a7f9dd85fc7afc03a6eb29d89d317f383a819da160ced555525d7321149f1a459d48c1eddee4c15e63a82a9
-
SSDEEP
1536:oUh3wHyNxrBhh5YLg1jEwzGi1dDyDwgS:oUkyNxrBhLggCi1dUZ
Score8/10-
Modifies Windows Firewall
-
Drops startup file
-