Overview

overview

10

Static

static

10

x6MPVreS87fF.exe

windows7-x64

7

x6MPVreS87fF.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    x6MPVreS87fF.exe

  • Size

    78KB

  • Sample

    230831-tbgkjafg4t

  • MD5

    11f51103b0503a907f2fe737effcba23

  • SHA1

    5519cd0e85228fbc49bc1a14a24785435b184ca4

  • SHA256

    7598961daa8affac4886d4aface1b5cbae1500e386ac42cafca7fc3d9ae5f6c7

  • SHA512

    541cd78f3f0aa511aaebcae15cac44f1d1c446162b6f56aee6cb62b5d408acbedf5a587bbedd2cc58d4b0c99f671b7e68a56248064b4ee4f97138f9fffd94a17

  • SSDEEP

    1536:gt6+6Y9yhU19DppS5wpOk3JCK6pFNmXd6fOpd/9nEh9TGKJYR:nhU19QwpOk5CK6XO/9ESKJY

Score
10/10
njratlime

Malware Config

Extracted

Family

njrat

Version

0.7.3

Botnet

Lime

C2

gremabenj.duckdns.org:3110

Mutex

Client.exe

Attributes
  • reg_key

    Client.exe

  • splitter

    8520

Targets

    • Target

      x6MPVreS87fF.exe

    • Size

      78KB

    • MD5

      11f51103b0503a907f2fe737effcba23

    • SHA1

      5519cd0e85228fbc49bc1a14a24785435b184ca4

    • SHA256

      7598961daa8affac4886d4aface1b5cbae1500e386ac42cafca7fc3d9ae5f6c7

    • SHA512

      541cd78f3f0aa511aaebcae15cac44f1d1c446162b6f56aee6cb62b5d408acbedf5a587bbedd2cc58d4b0c99f671b7e68a56248064b4ee4f97138f9fffd94a17

    • SSDEEP

      1536:gt6+6Y9yhU19DppS5wpOk3JCK6pFNmXd6fOpd/9nEh9TGKJYR:nhU19QwpOk5CK6XO/9ESKJY

    Score
    7/10

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks