Overview

overview

10

Static

static

10

!FIXInj.exe

windows7-x64

8

Resubmissions

11/05/2024, 19:27

240511-x6k3zsde9110

11/05/2024, 19:21

240511-x2tvbsdd2w10

11/05/2024, 19:20

240511-x2bczsdc8v10

11/05/2024, 00:08

240511-afcbtshg5y

11/05/2024, 00:08

240511-aex7xace4510

Sharing

Copy URL Twitter E-mail

General

  • Target
    !FIXInj.exe
  • Size 37KB
  • Sample240511-x2tvbsdd2w
  • SHA256 9a7b8171f8c6bd4bb61b7d8baf7dab921983ab7767705c3f1e1265704599ab98
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
njrathackedevasionpersistence

Malware Config

Extracted

Family

  • njrat

Version

  • im523

Botnet

  • HacKed

C2

  • having-jackson.gl.at.ply.gg:56522

Mutex

  • 7c148ac38012fc3caa04b1bbe75feba0

Attributes
  • reg_key

    7c148ac38012fc3caa04b1bbe75feba0

  • splitter

    |'|'|

Targets

    • Target
      !FIXInj.exe
    • Size 37KB
    • SHA256 9a7b8171f8c6bd4bb61b7d8baf7dab921983ab7767705c3f1e1265704599ab98
    • MD5 SHA1 SHA512 SSDEEP
    Score
    8/10
    evasionpersistence

    • Modifies Windows Firewall

      evasion

    • Drops startup file

    • Adds Run key to start application

      persistence
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks