General
-
Target
70c8b18ece14adc1d775e9eb5c4de116f2d4a283818ad69dd967fc1127130ec2.exe
-
Size
25KB
-
Sample
250110-c3x8xs1pdl
-
MD5
3386d440d3907b4c9322f7842a914026
-
SHA1
31402ac6467747beaea5957dffcba88d7ca9a249
-
SHA256
70c8b18ece14adc1d775e9eb5c4de116f2d4a283818ad69dd967fc1127130ec2
-
SHA512
d2f2cf13448960e4a71de312d9f8edc9083b4964394407c98ac06108aa6d27d8f0c1f6ccabb3e816896585b896425e18cf9760ccccd0315df970446d4dce0abd
-
SSDEEP
768:svpzorREU6cTM8R0pm8TGaUqKUr0QenOXNolnQ:QkRd6cY8RiHNZYWXNr
Static task
static1
Behavioral task
behavioral1
Sample
70c8b18ece14adc1d775e9eb5c4de116f2d4a283818ad69dd967fc1127130ec2.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
70c8b18ece14adc1d775e9eb5c4de116f2d4a283818ad69dd967fc1127130ec2.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
njrat
Njrat 0.7 Golden By Hassan Amiri
HacKed
82.193.104.21:5137
Windows Update
-
reg_key
Windows Update
-
splitter
|Hassan|
Targets
-
-
Target
70c8b18ece14adc1d775e9eb5c4de116f2d4a283818ad69dd967fc1127130ec2.exe
-
Size
25KB
-
MD5
3386d440d3907b4c9322f7842a914026
-
SHA1
31402ac6467747beaea5957dffcba88d7ca9a249
-
SHA256
70c8b18ece14adc1d775e9eb5c4de116f2d4a283818ad69dd967fc1127130ec2
-
SHA512
d2f2cf13448960e4a71de312d9f8edc9083b4964394407c98ac06108aa6d27d8f0c1f6ccabb3e816896585b896425e18cf9760ccccd0315df970446d4dce0abd
-
SSDEEP
768:svpzorREU6cTM8R0pm8TGaUqKUr0QenOXNolnQ:QkRd6cY8RiHNZYWXNr
Score10/10-
Njrat family
-
Drops startup file
-
Adds Run key to start application
-