General
-
Target
28f8ffd78f7b6931dc0995a4c4fa08c5d4c97755d7193c56c6e22519253427a3N
-
Size
65KB
-
Sample
241105-agjgjazgkg
-
MD5
bf27a2b1c3a091d14d52d660baa90f40
-
SHA1
45ff2043a8124b5b7c7f41f2493b501b2be720f8
-
SHA256
28f8ffd78f7b6931dc0995a4c4fa08c5d4c97755d7193c56c6e22519253427a3
-
SHA512
bfeefe304051b148083a0baa9a67d15e10948292e36ce746c98f1ccf4bd15ca1e7520e09aa75d6b89788473208625e183a47a69a51745db0f139330a1ab2594a
-
SSDEEP
1536:hcEIhoN36t+QviFw1CcWSUVOBnvb9fLteF3nLrB9z3ncaF9bSS9vMp:hcEIhoN36t+QviFCCl8BnJfWl9zsaF9Y
Behavioral task
behavioral1
Sample
28f8ffd78f7b6931dc0995a4c4fa08c5d4c97755d7193c56c6e22519253427a3N.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
28f8ffd78f7b6931dc0995a4c4fa08c5d4c97755d7193c56c6e22519253427a3N.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
njrat
Platinum
HacKed
127.0.0.1:40570
MicrosoftBrake
-
reg_key
MicrosoftBrake
-
splitter
|Ghost|
Targets
-
-
Target
28f8ffd78f7b6931dc0995a4c4fa08c5d4c97755d7193c56c6e22519253427a3N
-
Size
65KB
-
MD5
bf27a2b1c3a091d14d52d660baa90f40
-
SHA1
45ff2043a8124b5b7c7f41f2493b501b2be720f8
-
SHA256
28f8ffd78f7b6931dc0995a4c4fa08c5d4c97755d7193c56c6e22519253427a3
-
SHA512
bfeefe304051b148083a0baa9a67d15e10948292e36ce746c98f1ccf4bd15ca1e7520e09aa75d6b89788473208625e183a47a69a51745db0f139330a1ab2594a
-
SSDEEP
1536:hcEIhoN36t+QviFw1CcWSUVOBnvb9fLteF3nLrB9z3ncaF9bSS9vMp:hcEIhoN36t+QviFCCl8BnJfWl9zsaF9Y
-
Njrat family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-