General

  • Target

    f7faeebc8ab624646bda1935acbe807a2667ca47c2e7e1c74044ee981676a10c

  • Size

    1.4MB

  • Sample

    241219-qlfjfatqgl

  • MD5

    6fc84e8066c9b62eb5b6bb04cee1fa9e

  • SHA1

    b591ec47f0ee02e5b29b25e695d483e7dc5d2d3d

  • SHA256

    f7faeebc8ab624646bda1935acbe807a2667ca47c2e7e1c74044ee981676a10c

  • SHA512

    7182e487ff11d38c794fb69e95f95a5ec0e73ba49a76775d6d23be45a21f196aa69a64c9928a55be267ce181e2f884b77356cd91eaed01f64266550a4fc49a46

  • SSDEEP

    24576:asjX4XERnu1EDmxZ08416AhrND9zce6t5gDFCX3X1Xu1tuZxRCmQHaEC0:1jSERu1my3s6uzce6t5oFU1XuvuZxMmO

Score
10/10

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

billder

C2

192.168.219.111:5552

Mutex

9ebeb03e4b2b29c279a81a5bcaf9c982

Attributes
  • reg_key

    9ebeb03e4b2b29c279a81a5bcaf9c982

  • splitter

    |'|'|

Targets

    • Target

      godot-jolt_windows-x64.dll

    • Size

      3.3MB

    • MD5

      f8bc8ddce09bf2da998e1dca48135b98

    • SHA1

      ce9129b1a6a363a0685855287e060faf0cf14d3e

    • SHA256

      83cd30fe89c461a415221253336fa58dcb3b527b05b862b75b68945f4d47cf09

    • SHA512

      2643a04bc69b83a095c68a41e4121abf379246dcfaaf1be3a764ac2cbe1238ba28caff13900720c1fac6d64a7e474479352fd354e613f912ae04fa41ee8d83ba

    • SSDEEP

      49152:V25r1SKesxc/uuiXom5k1ialirWL+bGvQc7QCvw:24TuMlZL+biQqQL

    Score
    1/10
    • Target

      한판마안!.exe

    • Size

      249KB

    • MD5

      b7437af1a7cf4f11cd8de605f3139127

    • SHA1

      6601f9a986d683cb9dec9b87ec5db6174362615c

    • SHA256

      6dfaa7cba9ca8dea70442224b8b61b1cd75984b9949ecf1a31ec1644375cfe6d

    • SHA512

      43570327980e612e6a5bd4f11d92cd8b7cab22b2e8795072ec3c9c42d6b2cdc4ba8732d48cb496b29c5e3a840d72df939ed006478859a00fd19852d5c07d6d13

    • SSDEEP

      6144:yJQ5DxaMePfQNfFUzU9cQyMh67lWT14K9t8fmBZT:IeD0MGoNaYcE67lO/9tMg

    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks