General
-
Target
Cliexfvdfdgfdnt.exe
-
Size
31KB
-
Sample
240104-y21tbaaeem
-
MD5
f5d14ca748ba50e00cbd11a587941433
-
SHA1
e81de1fd93ab172d77e3268ca32bf0f0d8ec7e87
-
SHA256
d3e862b490573de17605e8c8b52805dc234040ec1b574fc968f11ae986c26c0a
-
SHA512
54ceef917ddf95243d87bd5526c74743f524ecdac46c95bb0d23bc9e580a2455286cb5f8d7e6befd6ef0f9fd8c6f358845f2c1a1cf13bf74dad4e4d53eeae509
-
SSDEEP
768:+OcDyuVP514zxjCzgfX/r0DJv1/QmIDUu0tiqzj:9Ze6RAB9QVklj
Behavioral task
behavioral1
Sample
Cliexfvdfdgfdnt.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
Cliexfvdfdgfdnt.exe
Resource
win10v2004-20231215-en
Malware Config
Extracted
njrat
0.7d
MyBot
here-discusses.gl.at.ply.gg:50579
d1adf1d83021467e91894b0678c3d503
-
reg_key
d1adf1d83021467e91894b0678c3d503
-
splitter
Y262SUCZ4UJJ
Targets
-
-
Target
Cliexfvdfdgfdnt.exe
-
Size
31KB
-
MD5
f5d14ca748ba50e00cbd11a587941433
-
SHA1
e81de1fd93ab172d77e3268ca32bf0f0d8ec7e87
-
SHA256
d3e862b490573de17605e8c8b52805dc234040ec1b574fc968f11ae986c26c0a
-
SHA512
54ceef917ddf95243d87bd5526c74743f524ecdac46c95bb0d23bc9e580a2455286cb5f8d7e6befd6ef0f9fd8c6f358845f2c1a1cf13bf74dad4e4d53eeae509
-
SSDEEP
768:+OcDyuVP514zxjCzgfX/r0DJv1/QmIDUu0tiqzj:9Ze6RAB9QVklj
Score10/10-
Modifies Windows Firewall
-
Drops startup file
-
Adds Run key to start application
-
MITRE ATT&CK Matrix ATT&CK v13
Persistence
Create or Modify System Process
1Windows Service
1Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1