Overview

overview

10

Static

static

10

9e3aed250b...aa.exe

windows7-x64

10

9e3aed250b...aa.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9e3aed250be7b3f252b3da1ed42aac411bb2a2c2d82a39cc1fef099252e4d5aa

  • Size

    43KB

  • Sample

    241223-2l67yatpfp

  • MD5

    d6fa3c48cebfa84b2d0484dc4056a02a

  • SHA1

    f6ff3ae838bf7b3ab4eb62bdeae4c3225988106f

  • SHA256

    9e3aed250be7b3f252b3da1ed42aac411bb2a2c2d82a39cc1fef099252e4d5aa

  • SHA512

    cd50a024cdee89bbf5df3975032e1106bf84602bb352c1952746823e808ca777b53407513155bf6cc34077680790a3d8dba953258c0d92cbd5ecad8e4b7c41da

  • SSDEEP

    384:kZy+Hl9n1iDcsyEqt3ptKwQsElGhOEazcIij+ZsNO3PlpJKkkjh/TzF7pWn5mgra:S99nU4pEqt5tKhohuuXQ/o8C+L

Score
10/10
njrathackeddiscoverytrojan

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

127.0.0.1:5552

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Targets

    • Target

      9e3aed250be7b3f252b3da1ed42aac411bb2a2c2d82a39cc1fef099252e4d5aa

    • Size

      43KB

    • MD5

      d6fa3c48cebfa84b2d0484dc4056a02a

    • SHA1

      f6ff3ae838bf7b3ab4eb62bdeae4c3225988106f

    • SHA256

      9e3aed250be7b3f252b3da1ed42aac411bb2a2c2d82a39cc1fef099252e4d5aa

    • SHA512

      cd50a024cdee89bbf5df3975032e1106bf84602bb352c1952746823e808ca777b53407513155bf6cc34077680790a3d8dba953258c0d92cbd5ecad8e4b7c41da

    • SSDEEP

      384:kZy+Hl9n1iDcsyEqt3ptKwQsElGhOEazcIij+ZsNO3PlpJKkkjh/TzF7pWn5mgra:S99nU4pEqt5tKhohuuXQ/o8C+L

    Score
    10/10
    njrathackeddiscoverytrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks