Behavioral task
behavioral1
Sample
Modrinth_Installer.exe
Resource
win10-20240404-en
General
-
Target
Modrinth_Installer.exe
-
Size
93KB
-
MD5
2cbace9fe745d6b698953a1286eaacc7
-
SHA1
5f88c8fd69c2457bd37442b7a03b17f4d1964199
-
SHA256
001b2f473864a2324818c19768fecf53adb6614fb6f9d84360875b48bd0f212b
-
SHA512
0b0bb670c7acbe594d434efdc5863a3a57da34a75a2cbfe146a18c2ac774f04dcbeff456e810a01464a2570782177e7db0c122fd8b9e55d3dfef260bd2139c2a
-
SSDEEP
1536:bKy1GkeUqZJO5wNSimjEwzGi1dD5DNgS:bKdUqZJOeAOi1dla
Malware Config
Extracted
njrat
0.7d
HacKed
hakim32.ddns.net:2000
id-diesel.gl.at.ply.gg:1488
b6b1b2291f1f50065c8c065ee8da54b9
-
reg_key
b6b1b2291f1f50065c8c065ee8da54b9
-
splitter
|'|'|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Modrinth_Installer.exe
Files
-
Modrinth_Installer.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ