Overview

overview

10

Static

static

10

Payload.exe

windows7-x64

7

Payload.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Payload.exe

  • Size

    27KB

  • Sample

    241213-qvblvazmfs

  • MD5

    9dc5784d093126ff7bf6aa6562be9ac1

  • SHA1

    a52f7b7a76838f51b6d0c8f4c6c5ba153558104e

  • SHA256

    75be7c0a9087e0a4094a371634b902a7ab57af0aef481c12487c491d9d07476b

  • SHA512

    26fc89d202b61fede5c91245dcfb5673f354134eebee852ab88888d34004fee417c20b64b449a96a0236b6b2f22bdbb50522621998e0e643461fcff1db58c333

  • SSDEEP

    384:zLgxgLXeA03/lfHWtfequqP9BR3MpAQk93vmhm7UMKmIEecKdbXTzm9bVhcaf6B1:X0ku/sOpA/vMHTi9bD

Score
10/10
njrathackeddiscovery

Malware Config

Extracted

Family

njrat

Version

v2.0

Botnet

HacKed

C2

audio-clouds.gl.at.ply.gg:28408

Mutex

Windows

Attributes
  • reg_key

    Windows

  • splitter

    |-F-|

Targets

    • Target

      Payload.exe

    • Size

      27KB

    • MD5

      9dc5784d093126ff7bf6aa6562be9ac1

    • SHA1

      a52f7b7a76838f51b6d0c8f4c6c5ba153558104e

    • SHA256

      75be7c0a9087e0a4094a371634b902a7ab57af0aef481c12487c491d9d07476b

    • SHA512

      26fc89d202b61fede5c91245dcfb5673f354134eebee852ab88888d34004fee417c20b64b449a96a0236b6b2f22bdbb50522621998e0e643461fcff1db58c333

    • SSDEEP

      384:zLgxgLXeA03/lfHWtfequqP9BR3MpAQk93vmhm7UMKmIEecKdbXTzm9bVhcaf6B1:X0ku/sOpA/vMHTi9bD

    Score
    7/10
    discovery

    • Drops startup file

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks