Overview

overview

10

Static

static

10

mal.exe

windows7-x64

8

mal.exe

windows10-1703-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    mal.bin

  • Size

    37KB

  • Sample

    240925-cghw4sybrk

  • MD5

    962d11254bc19df1911ea6be1103ec59

  • SHA1

    60f42848a7f5f3e725601dacfc24bd0908afd991

  • SHA256

    8dca3ae81581719dc2ad138ac37b183a763a44cfc23231671b06b6175c1db733

  • SHA512

    cbb6ce492d9a9cdf0bf7a341b75dc3bc44e8195242e34a26fc387bc8fca386f79c242ab284aa0ee4bc7776c3974ad34e5f7604fd758c56a9726590245dfdb6fe

  • SSDEEP

    384:WaJTgiG1CPZfursvO6yszi7oPJoTnuG6rAF+rMRTyN/0L+EcoinblneHQM3epzX+:zJ/5Wpszi7o2Tu5rM+rMRa8Nuhut

Score
10/10
njrathackeddiscoveryevasionpersistenceprivilege_escalation

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

19.ip.gl.ply.gg:42443

Mutex

c1f77453d4f3d154f8c1eedb0473faf9

Attributes
  • reg_key

    c1f77453d4f3d154f8c1eedb0473faf9

  • splitter

    |'|'|

Targets

    • Target

      mal.bin

    • Size

      37KB

    • MD5

      962d11254bc19df1911ea6be1103ec59

    • SHA1

      60f42848a7f5f3e725601dacfc24bd0908afd991

    • SHA256

      8dca3ae81581719dc2ad138ac37b183a763a44cfc23231671b06b6175c1db733

    • SHA512

      cbb6ce492d9a9cdf0bf7a341b75dc3bc44e8195242e34a26fc387bc8fca386f79c242ab284aa0ee4bc7776c3974ad34e5f7604fd758c56a9726590245dfdb6fe

    • SSDEEP

      384:WaJTgiG1CPZfursvO6yszi7oPJoTnuG6rAF+rMRTyN/0L+EcoinblneHQM3epzX+:zJ/5Wpszi7o2Tu5rM+rMRa8Nuhut

    Score
    8/10
    discoveryevasionpersistenceprivilege_escalation
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks