Overview

overview

10

Static

static

10

b7e8c657eb...6N.exe

windows7-x64

8

b7e8c657eb...6N.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b7e8c657ebef15f20a9bdca0ead60c8215cadfc399a61f638b47fbd546199406N

  • Size

    37KB

  • Sample

    240927-2zth1atgnk

  • MD5

    13f7e5922511ea4590152c9059cb60e0

  • SHA1

    2be81a268988e73c36e2e37480e448866b0e5f60

  • SHA256

    b7e8c657ebef15f20a9bdca0ead60c8215cadfc399a61f638b47fbd546199406

  • SHA512

    18792f9313a49047311bf9338f2b22bccc131f93e5e42d14d7cfdd7598285b2bdf744d9da5e134a05a67d229d09e438581bcd525e8555f46d3631399b74038c9

  • SSDEEP

    768:E+GAO3nJbk/D6EA/NM6rM+rMRa8NuhxAtN:ZUnJAL7A/Cl+gRJNM

Score
10/10
njratzzzzzzzzzzzzzzzzzzzzzzzzzzdiscoveryevasionpersistenceprivilege_escalation

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

zzzzzzzzzzzzzzzzzzzzzzzzzz

C2

147.185.221.22:18677

Mutex

0c3f60d5c8896bb9d7980f824f9a86cf

Attributes
  • reg_key

    0c3f60d5c8896bb9d7980f824f9a86cf

  • splitter

    |'|'|

Targets

    • Target

      b7e8c657ebef15f20a9bdca0ead60c8215cadfc399a61f638b47fbd546199406N

    • Size

      37KB

    • MD5

      13f7e5922511ea4590152c9059cb60e0

    • SHA1

      2be81a268988e73c36e2e37480e448866b0e5f60

    • SHA256

      b7e8c657ebef15f20a9bdca0ead60c8215cadfc399a61f638b47fbd546199406

    • SHA512

      18792f9313a49047311bf9338f2b22bccc131f93e5e42d14d7cfdd7598285b2bdf744d9da5e134a05a67d229d09e438581bcd525e8555f46d3631399b74038c9

    • SSDEEP

      768:E+GAO3nJbk/D6EA/NM6rM+rMRa8NuhxAtN:ZUnJAL7A/Cl+gRJNM

    Score
    8/10
    discoveryevasionpersistenceprivilege_escalation
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks