Overview

overview

3

Static

static

1

RajNX/nc.exe

windows7-x64

1

RajNX/nc.exe

windows10-2004-x64

3

RajNX/nc64.exe

windows7-x64

1

RajNX/nc64.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    141s
  • max time network
    97s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    17-09-2024 17:52

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    RajNX/nc.exe

  • Size

    37KB

  • MD5

    5dcf26e3fbce71902b0cd7c72c60545b

  • SHA1

    970bbe298c8ec673fe2257ad6363d29942171fd1

  • SHA256

    e8fbec25db4f9d95b5e8f41cca51a4b32be8674a4dea7a45b6f7aeb22dbc38db

  • SHA512

    b5b5ebe0e333a7331a08f488a66e9a3ff4ea5f5d2552bbc1477627df32f92fdf2a0c279e929cc93a61e20d90f7797f552f2c3a710903cbccc441d14b018928e1

  • SSDEEP

    768:mucfgSLKkEXRYxLKlVMGmmkn2TocrC+q4rPBn:vcfpKkEqKlGGmjwTrC+q4rPBn

Score
3/10
discovery

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery

Processes

  • C:\Users\Admin\AppData\Local\Temp\RajNX\nc.exe
    "C:\Users\Admin\AppData\Local\Temp\RajNX\nc.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:4736

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/4736-0-0x0000000000400000-0x000000000040E000-memory.dmp

    Filesize

    56KB

    Download