Behavioral task
behavioral1
Sample
Soundcloud Mp3 Downloader.exe
Resource
win10-20240214-uk
General
-
Target
Soundcloud Mp3 Downloader.exe
-
Size
34KB
-
MD5
10ca22a332f6acefb21a957e09e30608
-
SHA1
a048ee36ef2ba5dc9b676ba815df68b6d6188f60
-
SHA256
79f0aeca1d115dc298f302ad91b1762f3ef6aefe16b13f269aa6d211def3ff38
-
SHA512
4c751bc0923eed5f33bee95c706253704a40f838a45de7b35a34f3c330af399e98e37ed3c0f7c5d0a9333a911207e3ed5589b099838ffac2c029b86bc8441a91
-
SSDEEP
384:ZtZNYkRM94IIWsi7omXh2JfNFPIMeTuSblDTodg9TduS/EIGsJjwE7UMcrie48eC:nDSOComanqlouDuCEIGfRn+fw
Malware Config
Extracted
njrat
0.9d
Hacked By HiDDen PerSOn
0.tcp.eu.ngrok.io:10540
eb79d2041d670825ab1270eb43a4aa92
-
reg_key
eb79d2041d670825ab1270eb43a4aa92
-
splitter
|Vyrn|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource Soundcloud Mp3 Downloader.exe
Files
-
Soundcloud Mp3 Downloader.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ