Overview

overview

10

Static

static

10

Assets/D3D...re.dll

windows10-2004-x64

1

Assets/D3D...se.dll

windows10-2004-x64

3

Assets/D3D...32.dll

windows10-2004-x64

1

NL.exe

windows10-2004-x64

8

Plugin/1.exe

windows10-2004-x64

3

Plugin/10.exe

windows10-2004-x64

3

Plugin/2.exe

windows10-2004-x64

3

Plugin/3.exe

windows10-2004-x64

3

Plugin/4.exe

windows10-2004-x64

3

Plugin/5.exe

windows10-2004-x64

3

Plugin/6.exe

windows10-2004-x64

3

Plugin/7.exe

windows10-2004-x64

1

Plugin/8.exe

windows10-2004-x64

3

Plugin/9.exe

windows10-2004-x64

3

Plugin/Andex.exe

windows10-2004-x64

3

Plugin/Duck.exe

windows10-2004-x64

3

Plugin/Gren.exe

windows10-2004-x64

1

Plugin/P.exe

windows10-2004-x64

3

Plugin/cam.dll

windows10-2004-x64

3

Plugin/ch.exe

windows10-2004-x64

1

Plugin/chrome.exe

windows10-2004-x64

3

Plugin/cmd.exe

windows10-2004-x64

3

Plugin/dneg.exe

windows10-2004-x64

1

Plugin/explorer.exe

windows10-2004-x64

3

Plugin/explorerr.exe

windows10-2004-x64

3

Plugin/firefox.exe

windows10-2004-x64

3

Plugin/hms.exe

windows10-2004-x64

1

Plugin/inf.dll

windows10-2004-x64

1

Plugin/mic.dll

windows10-2004-x64

1

Plugin/mpress.exe

windows10-2004-x64

3

Plugin/pd.dll

windows10-2004-x64

1

Plugin/plg.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Neverluse (2).zip

  • Size

    11.9MB

  • Sample

    250115-wnhz8szpew

  • MD5

    4a8ca7f758c5b8429f2c7bbfc6ba33a4

  • SHA1

    f5d238a837c5d9ae2faaae09c01b90abd7a6753d

  • SHA256

    a1c489cce0663f3ec6b057a16f951d455b04458553803b07dd356ea4e3ccba2f

  • SHA512

    726f03f77d77716d56493594a9d59a0e5e2d76cd1434eb2a7d279f35b26f7056b930bf86532b147fbfcefec612c727d04e17f81f5256fb567341bfe205550e32

  • SSDEEP

    196608:Ti+e553UgECAf+VLyHIZKpMKMXKhIIrAH87shgx4G+1yOAvQ1pn0u9I/wvNePM5I:Tewjj+pnawB/1Sg94gNNJX7yZ

Score
10/10
njrathackeddiscoveryevasionpersistenceprivilege_escalation

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

hakim32.ddns.net:2000

127.0.0.1:5555
Mutex

181a74d35475c4a2137967893bc3cc88

Attributes
  • reg_key

    181a74d35475c4a2137967893bc3cc88

  • splitter

    |'|'|

Targets

    • Target

      Assets/D3D12/D3D12Core.dll

    • Size

      5.4MB

    • MD5

      7fc05c9a8366d19302dfd13d09d3ebac

    • SHA1

      df07482f58cc84c439979548682cc44c48471a06

    • SHA256

      8710110eccf43a32e5e1a04552cb344832922a0cd23caeecb764e18bd5cdffa8

    • SHA512

      68385bde06684b0e9ea809372f151cd266cc4f9c3be14be0127a2e7468538f453c7da434ef5ddd9f751dcc054032dc6c7baa2bc5bbebd1c6ea3e5d148a931c1d

    • SSDEEP

      49152:DDcfp0Vm21RnkVNaAFiEVTmZA+kkIwaaKsb7Xvdq0SpZcxNom7nLMzh3:Tg21Rn7rImnbDNw

    Score
    1/10
    behavioral1

    • Target

      Assets/D3D12/NeLuse.dll

    • Size

      13.2MB

    • MD5

      d564b96c6c93363d2bf9c26c17a0750f

    • SHA1

      46d334c16b1a5d44e5f0aa9441f43112512da2ec

    • SHA256

      9be2c031999fb8093ea281796ef54081b3f425fcd63ec102f13752053a50b111

    • SHA512

      e80c1a019d6e921eedd99ba340b327ead97843a0ed36ad69057bc56d3d7ef6bf3549ce84ac4c2f31a7a8db5172eaf008438bb5aa47cb60e0837f4d27a0af5e71

    • SSDEEP

      98304:a+c5Nn4FeH0GnROrT/RM45oiMYk41QUsgvWJAeDd7gjGJerIIQsY2e+w3dqip:oIgHeAinOUSJAeDx6PY2ezE

    Score
    3/10
    discovery
    behavioral2

    • Target

      Assets/D3D12/opengl32.dll

    • Size

      3.9MB

    • MD5

      6d55a77ccc995de3759c18fa25a6a424

    • SHA1

      e267453f77ec20c91520c0a9243cf25099483c41

    • SHA256

      b1238496bd6f4f934711dfc5795f127d81564e7c384ea540f971c60b21086de9

    • SHA512

      23d9eb432e8c2c33b447261acc33effde712ee8f2dd6f494a1837cf3329a927f7b0adf9388dbeb9783ffe36d7be8c07f0607730ac150405b42baa5a93edc5bdb

    • SSDEEP

      49152:dU9yC/2CfySoGMEG1ONdI+hUhHUcwrHxH8eQi7Ec4AjFxkqMAVEvJJ4ePLBvznHh:dsOhtMMwtJAMxfcpPd

    Score
    1/10
    behavioral3

    • Target

      NL.exe

    • Size

      93KB

    • MD5

      f0c234db804898229a7e3bdea180f915

    • SHA1

      2c61d230f86552e80bf59e6e21546a8dce6f3452

    • SHA256

      a62ee0552b21391d0e2898786f9ec2473eb21d2e7a69aad9737862835f00f377

    • SHA512

      e438734c8811875e8efbea1d6a4ec153ae01a666274c0d8d0751fda6175df3b8f09058f1d7627cabd7b84d873ec31e2407a414c38ecce0797d2718d67beff900

    • SSDEEP

      768:8Y3UbnD9O/pBcxYsbae6GIXb9pDX2t9zPL0OXLeuXxrjEtCdnl2pi1Rz4Rk3EsGg:gbxOx6baIa9ROj00ljEwzGi1dDcDCgS

    Score
    8/10
    discoveryevasionpersistenceprivilege_escalation

    • Modifies Windows Firewall

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Executes dropped EXE

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral4

    • Target

      Plugin/1.dll

    • Size

      367KB

    • MD5

      c3e8ff959a4027bc8cd67e26d3003370

    • SHA1

      5469f8a06813027ab3f8bcfaf4d5c87810ab347a

    • SHA256

      afda8e5fb125e27aa1062365ab4b77c4fa3acd14a6e435ab7ddde18644266af3

    • SHA512

      d0f461200daa100f6d05320c538d793e662f9ddfb13fa70351bb1bdf21cf7a1c256d284c3378551d288d7275cfa9cb32e84cdb13e7bc49ca4b5483d8ef999f15

    • SSDEEP

      6144:ELPgpcVH6h+9Ve/B2Gmzoun1YUqqlkLqa8vcvIjlk0Hrg5eplNpi:EceD9uB+ca1Yg0qakwIjKU1Nw

    Score
    3/10
    discovery
    behavioral5

    • Target

      Plugin/10.dll

    • Size

      1.1MB

    • MD5

      e3bf65ce42edca6891fb7123711ace2c

    • SHA1

      455a838ce4c51976faa9312ae212d7fc82ff7e19

    • SHA256

      4d04ead199b9f3433314ac5a4c5466d0ce5e4c43e2fdd381ae0d6a1e705e6f1e

    • SHA512

      1bce779f1afc8a10c9dffe245ebfb9c46c69cf805cc24dfbb5edfe6e3577b0b34e7ee59763a31e05579f22a584628c10c87fcfb6e9f180d16a0648b6fe05f490

    • SSDEEP

      24576:2cMzcRP/NYt1FxJlZfY+4VHM9gJppE2ZiH8BnoTsHa0GMG:2HcZN4FTfYxHHoHuoTV2

    Score
    3/10
    discovery
    behavioral6

    • Target

      Plugin/2.dll

    • Size

      271KB

    • MD5

      07194ab187366cab46972f2f2f1ef0b5

    • SHA1

      14927d4482a318004a42a5cf8cc40ad08673a302

    • SHA256

      7ab30a602581387fa97faf7f8100d2c98bd3407372f723f805f2346addb7d008

    • SHA512

      989720c17fca490d1fb3a6166f713b07410b0525c7ee142d192de4f5a044f904633b3eb8c3e83f8448bc7ee3da5cb448711067025cdf037d20cf1e9d18131446

    • SSDEEP

      6144:HLPgpcVH6h+9Ve/B2GmzountZ0MGr33cPuWG69SvplN2r:HceD9uB+caYMIcmWG69SLNU

    Score
    3/10
    discovery
    behavioral7

    • Target

      Plugin/3.dll

    • Size

      223KB

    • MD5

      fc2c601bba0029124a120db3035b5652

    • SHA1

      a56b3b16e0814ed4da024ab2eee968c17c004698

    • SHA256

      666f19c5d6528c4e071b4414aa410eae3497c809107739db87e39374ceb8593c

    • SHA512

      0c49ad30c8bbf125fa3a47ac63d862063b8feadd87968356237a7df08b8cf4ed4b66e1a8852303b32f6d8ff168a24743fc7adeb94de4aa6f72aed3f2c279b95c

    • SSDEEP

      3072:hLXfgUssa+sVyMMH6h+xr0we/4E2Gd0NRW5H76QM4o+aeMMf6W9plNNAGExB:hLPgpcVH6h+9Ve/B2GmzounxW9plNWl

    Score
    3/10
    discovery
    behavioral8

    • Target

      Plugin/4.dll

    • Size

      202KB

    • MD5

      621ff03775382229afbc039efba07212

    • SHA1

      3bcf1669b70df52059d2fb5c9025ad3fd30170ad

    • SHA256

      d22944f50fdbe7b9fc55807ebca0275e59a0ede94226e2ce365bc507bc96ec68

    • SHA512

      3168bb66d0e2a72df58c46275916fc9cd1d92512b4221fc0259859904d174f9a4b4cec3ff43ec91e4a084ebe4cbfd7349cfba230b1e56403bf36a711d2d8b90b

    • SSDEEP

      3072:NLXfgUssa+sVyMMH6h+xr0we/4E2Gd0NRW5H76QM4o+aeMyzBplN1AiENh:NLPgpcVH6h+9Ve/B2Gmzoun4plNud

    Score
    3/10
    discovery
    behavioral9

    • Target

      Plugin/5.dll

    • Size

      292KB

    • MD5

      54b06dbc99832ca8a54232351af21059

    • SHA1

      42367bca4add1792f841f9c20bf8d6a6410c0ae1

    • SHA256

      4b6914d1ca3c871a2e79d54bb19a7a66e207548214b215698ac3371595cecb5a

    • SHA512

      e49dbe7b2a58dc5be68cc79aca83a090486786454d03461ae256f5a0b098d8e00f18032bf1eddd7ed7e863580b8c463771704df404009d3ba1b375b4ec9bd87a

    • SSDEEP

      6144:iLPgpcVH6h+9Ve/B2GmzountmmJwBISoHVgmRuPOLaplNZW:iceD9uB+cat3JKbFDOuNE

    Score
    3/10
    discovery
    behavioral10

    • Target

      Plugin/6.dll

    • Size

      628KB

    • MD5

      633b07e6516aea1d677b8d64bfcb04e7

    • SHA1

      8f55062fbec6bea8f8cb689e5228cb0f4b759b59

    • SHA256

      0d01cc53ba6630b8bae7674cfd4deebe6cb0c9e5d2029e3f29c0bc25b2760207

    • SHA512

      456207a76294bfc5f8f88b3c893b1d931604f935a67770349d6ef831674a65de73ed6d01b2c51c0a3499c30543e5011490b0ebfb34598d00504f1574adae3df4

    • SSDEEP

      12288:RceD9uB+caZ042+6tMOfLEawCDQuPBFjXwR0F+SbNV:RcMzcRG8pBVwyNb

    Score
    3/10
    discovery
    behavioral11

    • Target

      Plugin/7.dll

    • Size

      31KB

    • MD5

      ba2d32d8118f59ae4aab0bae941542ed

    • SHA1

      b627f2ffb0c8d82e8b9413228a8b75e70d716f2e

    • SHA256

      814ac620ea996b45e8c0fc55ae57e10c11add1cf4fbe9d260a5f13052051b420

    • SHA512

      1181d91e843f1a51248e4080fe91539d77c749125017fb3a1382da3c7b15317337510a0e18827a7ef6ad091c66ff70801f68597895e81c08e6daf96ca0ade839

    • SSDEEP

      384:ZokI7SgVV+17QwkSoL20gNjhlLk245nKuk4Z/jKeK:an07QnaHjh5m3K

    Score
    1/10
    behavioral12

    • Target

      Plugin/8.dll

    • Size

      259KB

    • MD5

      8ca640310df5533abc19acd7dabc829e

    • SHA1

      38d126c7d252c5aa5963be1022060869bb3daea9

    • SHA256

      06b3345a22309557ec7168efe1d4bb48a6180a9643faa472c9c90b004ce0a1ac

    • SHA512

      a7d699d09e0e78815e842eae633b44c03ad0c974985cf2faa4f8f64ab8ceec164f75390f120170847c59a4f09d9bcb3ab0c3f0377afa5cdf834b4612528a15df

    • SSDEEP

      6144:WLPgpcVH6h+9Ve/B2GmzounAbvkteYu6eYsvSplNH0:WceD9uB+caAbvZYA/v6NU

    Score
    3/10
    discovery
    behavioral13

    • Target

      Plugin/9.dll

    • Size

      469KB

    • MD5

      1a018036c48b4cd8e0c7d1a7ebea06a9

    • SHA1

      8ec946a133f07bf62754caddf3a884020f430f8d

    • SHA256

      45aa36d007d27ca8e9659cd004a98f048b232161202553da643c4d1df3427459

    • SHA512

      a8a8cbb9a1bfbdbe610bcde92d49674ee155d11fb6992dcd74551926fb3c1d8c2eebc773655638f785079961129cc9112718f2d4764812bbca9f085d3d7bd79a

    • SSDEEP

      12288:BceD9uB+caeL5rWxh9FnOl5T3e2Vzdb3Cl9WNNg:BcMzcDL5yxhfnk5TnhVk9m

    Score
    3/10
    discovery
    behavioral14

    • Target

      Plugin/Andex.dll

    • Size

      100KB

    • MD5

      6032ce8ceea46af873b78c1f323547da

    • SHA1

      8c5bd4a70e0f21aeba41c07976ace2919b64fd80

    • SHA256

      19dc8c66d04d1a1d781e59107e2a1db5fd6288761c9dfd0c6909e533e79d04e7

    • SHA512

      3ada1663cb730f43b44e32ceade5d0b9cae20d1c20001691a1d226d99c82510e001581f67f5131d6c21e0e0cf98e5089c3d0f22a6a1e3347053ed73304ccc6fe

    • SSDEEP

      1536:CQvlJNxwHPmtN2dWWWQmMTuAip6XIbY6i32Kf3oKwfTjK2f20:CQNwaFET6p6XOY6i32U3BwfPK2e0

    Score
    3/10
    discovery
    behavioral15

    • Target

      Plugin/Duck.dll

    • Size

      63KB

    • MD5

      d7d46952778a85491b34f62991a060d4

    • SHA1

      ff30ef03867eb74f2454375cbe3508ee26b07163

    • SHA256

      5d1217e2c9e820c3e7b2fc28fab4e40d85e0e9f4362e66a451e42d597b8c2650

    • SHA512

      7c9b4c254a1977d1a16ac3aa8ce81d897eeda4465e51c9f0cbe2c03326cc6c3bb7acb89d8d1f4ce1dec03118574b57f30a3400b2dc47b70aa87bfd2f4f99f8bc

    • SSDEEP

      1536:miaFJkobMa8dBXu2IbV3DKyBzYDEBUhYW:miEbMRdBXnUV3DKyBzYDEal

    Score
    3/10
    discovery
    behavioral16

    • Target

      Plugin/Gren.dll

    • Size

      155KB

    • MD5

      8775af76bef724f22a0b5bb7c787a1cc

    • SHA1

      39620f580705b8b214f94acc7d1c81bceec15ba9

    • SHA256

      9a8f461b55d753e7f66f3db602a29a079efe626c514920d933a471489ccab951

    • SHA512

      966de3d1d6463eb15ed0b1ad6e1902d343c1b587abecf4fa27798bd576effadbe99a7f787de320cf815dacbfb5795e3dff369802e13d95c96fcb9c54e32bf61f

    • SSDEEP

      3072:bbQsn8VDXc8qrTvJZErpoVAOjKsYMouMpYc6UI1i03AJJmdn8txICpH3SHB8zkFQ:Zn8VDXchT0IusmViHB8YdwLm

    Score
    1/10
    behavioral17

    • Target

      Plugin/P.dll

    • Size

      29KB

    • MD5

      a7a746707ca4e136585570eef6daf2d4

    • SHA1

      50705953b5184d8c0fea9c10619d765648976b78

    • SHA256

      d3cf09c638fb94b81343c94dd1a9d7ee385a5240a1f3d78fc70dc591b417999d

    • SHA512

      dc97a3cdeb599c976bac9ef4e901c97e4bf02035b6ea60c0e8d9a288b220ca66545a4810842623574293ff09bd4c60fdfaa878fd4e7aa2dbd493d4f001fb0ce5

    • SSDEEP

      384:Af/GMPhe22EjYdr1M8KdkMLk24jXPlCuoM/SYNp0DDZ3:eGq0dr1M8Kdkg2XPdS3

    Score
    3/10
    discovery
    behavioral18

    • Target

      Plugin/cam.dll

    • Size

      63KB

    • MD5

      a73edb60b80a2dfa86735d821bea7b19

    • SHA1

      f39a54d7bc25425578a2b800033e4508714a73ed

    • SHA256

      7a4977b024d048b71bcc8f1cc65fb06e4353821323f852dc6740b79b9ab75c98

    • SHA512

      283e9206d0b56c1f8b0741375ccd0a184410cf89f5f42dfe91e7438c5fd0ac7fa4afbb84b8b7ea448b3093397552fd3731b9be74c67b846d946da486dcf0df68

    • SSDEEP

      1536:7EoML5LFXbUu5ExN3hep+cx4sKcuxpSe:7ERZxQxep+cx5Kcu3

    Score
    3/10
    discovery
    behavioral19

    • Target

      Plugin/ch.dll

    • Size

      75KB

    • MD5

      8e39d0bb786fb308842102fb90211910

    • SHA1

      fcc8a86135ac63aaf51e6d80472813b5385feb4b

    • SHA256

      57a02c05691f47b13a6bd77258a559ff193a2e3bc19b6d4339ffd06d2f47569e

    • SHA512

      ace89e18827953ccd61af94ac49cc3b1005be3ab0ab5a44c28d690b33bbfa89c2e4e34970d3a8898e65d63f9956747708e2b64afa21c7fe5799131702fc45850

    • SSDEEP

      1536:bkU/zdQrxRqkFvoCC3TWuA9GyLJnFMarv:bkVlRqkBobiuA9GyLJnFMmv

    Score
    1/10
    behavioral20

    • Target

      Plugin/chrome.dll

    • Size

      29KB

    • MD5

      685c1eade930e2b40f02f98328fca44d

    • SHA1

      e42f950e1dbed069d7c337c9ff09f55fb90afdf6

    • SHA256

      ec85087f6830b71f106871c59dc8ffa0de91cc3d8ce8c269b7264359d9b4e80b

    • SHA512

      aceb433536f6f8f684219c2d62b64604175d1eb8fb0c3d0aba819c81b6793f2f96b2c8b13d7311f7513234d8d9e62dbb61750156d9ee8d8fdfdb7b5ec69262fd

    • SSDEEP

      384:rfBLiWh61JSBpvl3rcA8k0H1sGvfcLk24jXPlCuoo/SYVjDsPIWS:12vTSB1p3Q1sGHw2XPIo

    Score
    3/10
    discovery
    behavioral21

    • Target

      Plugin/cmd.dll

    • Size

      29KB

    • MD5

      189937260ddfd3b529ed1f5d80e9ac08

    • SHA1

      70e63e7ac92f55228a81aae93960df6551cb65a9

    • SHA256

      1adfc8c1d730b305aa7b79973a2a9d7bd7437742e464de3671448b70658b860a

    • SHA512

      053d95d415ca3cbedae305eeb000c57978d96e6bb86319e6f600f7e3236ed95ae8b412d76494d1b4ab7f57956b4869799240b99b3f310dcda2b522eefbb6d464

    • SSDEEP

      384:VfBLiMh61XlBpvl3rcA8k0H1sGvfcLk24jXPlCuoo/SY4jDsuIWS:j2JNlB1p3Q1sGHw2XPvb

    Score
    3/10
    discovery
    behavioral22

    • Target

      Plugin/dneg.dll

    • Size

      176KB

    • MD5

      0edfdfc37d6e263002e8294424783c35

    • SHA1

      e7bf2e195ff32d5f6d5b09164de94e83d1f0f3f2

    • SHA256

      5b9c1b0aedcd82ce25b5f7d6ced6b38943b5c0ca14f09a27b4bfb4eb4f0204d5

    • SHA512

      14b4bd0a6e6ef26a4713cdb115f298d35530864b00a4c5a9d84c7e27086d232bca2ae18c58831a72ff687b4511735bb0669a5136b59b4813464bb25c384b123a

    • SSDEEP

      3072:owQoQ2z3lUnNx+DsH4ceTgXjrF5hvTjhppH1myZXGT2oelwxkzXJNVlzE9JmZcIR:ALf+/yDHlaNIR4tlYm

    Score
    1/10
    behavioral23

    • Target

      Plugin/explorer.dll

    • Size

      29KB

    • MD5

      9cc05ec9d58102696092dd1ab9103fc2

    • SHA1

      d4019f352ea64504a357c6447c56f79e06602131

    • SHA256

      2e05264acc620b4828ec23550351bdaa7cc429fb273ecc4450ea58f2b20b7f61

    • SHA512

      a74f5ebbe8f154857af1408aabc2fab30240ff5dd892d5aa9b510c63d51cb8c67605ff6c34459d620c10bb9d13085ac34072235b7bea274605014f9f8a7dbe55

    • SSDEEP

      384:wfBLiyh61NmBpvl3rcA8k0H1sGvfcLk24jXPlCuoo/SYsjDsqIWS:s2TXmB1p3Q1sGHw2XPrv

    Score
    3/10
    discovery
    behavioral24

    • Target

      Plugin/explorerr.dll

    • Size

      29KB

    • MD5

      2407032a11e906cb7eb171d4e8256992

    • SHA1

      f6dfc9b6632435136167a16f8a5b23fa624246aa

    • SHA256

      b9347d22eab0264a0253aebcfb735ea687453fc85d9a906933673017abe4285e

    • SHA512

      55bed6d2c026c2f29a13f9d17e9c3d0594158cd8caab8a8fe9dd6fdbc5816efddf2c006489c062b7c191d5f6b40541f7d51d58da0353f5c9853162b13c8b325b

    • SSDEEP

      384:2fBLiyh61NmBpvl3rcA8k0H1sGvfcLk24jXPlCuoo/SYwjDszIWS:O2TXmB1p3Q1sGHw2XPrE

    Score
    3/10
    discovery
    behavioral25

    • Target

      Plugin/firefox.dll

    • Size

      29KB

    • MD5

      1dae4ce0658e69e451d007200a69de1e

    • SHA1

      141f5b6c4ec400fe58ffdf384a08c138875ab904

    • SHA256

      2fb77c75a773abb9f61c6c918c2ad90d2f694a3f4822e0f934d9549b386cd8ca

    • SHA512

      786b69e5b96fd4ace34fa7226da9d4a0be7cd4f5b475116ac1a07d34a7a2891c5511fb3ff14540719a989e72d5c84c12dc7f0faeab108adb87746d6a611beb44

    • SSDEEP

      384:yfBLikh61PGBpvl3rcA8k0H1sGvfcLk24jXPlCuoo/SYcjDsBIWS:C2x1GB1p3Q1sGHw2XPzW

    Score
    3/10
    discovery
    behavioral26

    • Target

      Plugin/hms.dll

    • Size

      61KB

    • MD5

      f4407493019fe05f34b074539519ebc4

    • SHA1

      b3f5ff69ff4fee493440c133f033a0d05a6edd43

    • SHA256

      a5c1bdc7b8c0e456edac031568c8acca0524eeec7e91977d63c41c0a82c608c5

    • SHA512

      24668bd17617e038544ed5cc92385cba01ec1b70725930457a5deb6f4ef1a079e3af8d7f592dad851fb1685387daaf47cc02a6c406042dc7ec1f406d2ab3bfc4

    • SSDEEP

      1536:ne/lKI2YbmnzBSrw0fFGIa0H7BldTRu8j0ZwM0UCz:ned522fR1hYZuz

    Score
    1/10
    behavioral27

    • Target

      Plugin/inf.dll

    • Size

      19KB

    • MD5

      cef141d894400bc2e0096d1ed0c8f95b

    • SHA1

      1bcef29980686dc4cf8ff13f251f1ead7ba6e2d2

    • SHA256

      9648ffd2eb53744c5f78dc8442a8bcbbe9831db1e198be370a62cbf9f51cd896

    • SHA512

      794e7cc5a899407414bb3bbe2f2aadbfcacdeda2eb0381249b8dd5ed342534910b85b1450f509f1d6b36109efdc82eb3ef1eba36b76ce123b1034192d871d2d7

    • SSDEEP

      384:XioX36zZ00sK2qbc+LROMnDdU6cpobsTP4Fj:SC3wS0/9dcpFgj

    Score
    1/10
    behavioral28

    • Target

      Plugin/mic.dll

    • Size

      50KB

    • MD5

      d4c5ddc00f27162fc0947830e0e762b7

    • SHA1

      7769be616d752e95d80e167f2ef4cc6b8c3c21fe

    • SHA256

      b6fb6b66821e70a27a4750b0cd0393e4ee2603a47feac48d6a3d66d1c1cb56d5

    • SHA512

      9555f800213f2f4a857b4558aa4d030edf41485b8366812d5a6b9adcc77fc21584e30d2dd9ce515846f3a809c85038958cb8174bf362cf6fed97ca99a826e379

    • SSDEEP

      1536:YmXfC5RemUFTxqPbSiQZrCF1HzGL17d8:YmXfCgFTxq+iQZrGTGL17d8

    Score
    1/10
    behavioral29

    • Target

      Plugin/mpress.exe

    • Size

      101KB

    • MD5

      8b632bfc3fe653a510cba277c2d699d1

    • SHA1

      d6a57aa17e5eb51297def9bac04e574c1e36d9c7

    • SHA256

      2852680c94a9d68cdab285012d9328a1ceca290db60c9e35155c2bb3e46a41b4

    • SHA512

      b9ea70ed984d3b4a42eceb9f34f222b722c4c1985b79b368d769fe0fd1f19f037ffebe2cf938aa98ed450337836a7469d911848448d99223995f7fb3a9304587

    • SSDEEP

      3072:S0+mlNniJkkKcfqBOb65VgB183gUGQ340HpL:SvmlNn4kkeOAVA1rUGh0Hp

    Score
    3/10
    discovery
    behavioral30

    • Target

      Plugin/pd.dll

    • Size

      139B

    • MD5

      7e3c8627a5f7d7b9a8e54541bf4e1eec

    • SHA1

      92907340746a489ba6bdc1a887bf68b160057a3a

    • SHA256

      8701c0d8266cefd9ffb4006a278e9d28963e90e1688f5e1f5c65db6a132be733

    • SHA512

      cf06e93ae7d4942539d5dbac9253c696663c7164697018c5bb9d2b92bfb27eb25a861acaadd81506c124f0ecd43230343f4c2f3257ed9106907bc0270494ffb4

    Score
    1/10
    behavioral31

    • Target

      Plugin/plg.dll

    • Size

      28KB

    • MD5

      0cbc2d9703feead9783439e551c2b673

    • SHA1

      4f8f4addd6f9e60598a7f4a191a89a52201394a8

    • SHA256

      ea9ecf8723788feef6492bf938cdfab1266a1558dffe75e1f78a998320f96e39

    • SHA512

      06f55b542000e23f5eeba45ea5ff9ffaddddd102935e039e4496af5e5083f257129dab2f346eeae4ee864f54db57d3c73cf6ed1d3568087411203769cf0ddd66

    • SSDEEP

      384:iLa+IgaVdBJfFfZsDNujglHdUky5P6bL2XIadYweVqJE+La7gmlweR9Oq7Bp2RhG:8ZIgYdbfAhdGJ6bL6YT2fO9vca2kSs

    Score
    3/10
    discovery
    behavioral32

MITRE ATT&CK Enterprise v15

Tasks

static1

hackednjrat
Score
10/10

behavioral1

Score
1/10

behavioral2

discovery
Score
3/10

behavioral3

Score
1/10

behavioral4

discoveryevasionpersistenceprivilege_escalation
Score
8/10

behavioral5

discovery
Score
3/10

behavioral6

discovery
Score
3/10

behavioral7

discovery
Score
3/10

behavioral8

discovery
Score
3/10

behavioral9

discovery
Score
3/10

behavioral10

discovery
Score
3/10

behavioral11

discovery
Score
3/10

behavioral12

Score
1/10

behavioral13

discovery
Score
3/10

behavioral14

discovery
Score
3/10

behavioral15

discovery
Score
3/10

behavioral16

discovery
Score
3/10

behavioral17

Score
1/10

behavioral18

discovery
Score
3/10

behavioral19

discovery
Score
3/10

behavioral20

Score
1/10

behavioral21

discovery
Score
3/10

behavioral22

discovery
Score
3/10

behavioral23

Score
1/10

behavioral24

discovery
Score
3/10

behavioral25

discovery
Score
3/10

behavioral26

discovery
Score
3/10

behavioral27

Score
1/10

behavioral28

Score
1/10

behavioral29

Score
1/10

behavioral30

discovery
Score
3/10

behavioral31

Score
1/10

behavioral32

discovery
Score
3/10