Overview

overview

10

Static

static

10

e1a244c5d1...db.exe

windows7-x64

10

e1a244c5d1...db.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e1a244c5d1491aad1902df514af314db.exe

  • Size

    43KB

  • Sample

    250228-h87x7stzat

  • MD5

    e1a244c5d1491aad1902df514af314db

  • SHA1

    5792f20685d9503b93ae07620911a9fc2cd5a7a6

  • SHA256

    3e356a29411ae2f9a8ca4019d58ca9ca71837b00c8587afbb5e3cad774ba7bc1

  • SHA512

    f07f143bde596cf2080a1240f721d96b0a2aeaeb0310700e95ab019d9506484fea6ca69a0408f0f821aa21c54b8caf5db02bab3338b374f3d8942ddb91270578

  • SSDEEP

    384:fTZyf9lkteXivmGUyeSRCymw5EBxE1UE+zwIij+ZsNO3PlpJKkkjh/TzF7pWnuml:fdElkQyvdhe8Ce4E6uXQ/oTC+L

Score
10/10
njrathackeddiscoverytrojan

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

quiet-cloud-77052.pktriot.net:22728

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Targets

    • Target

      e1a244c5d1491aad1902df514af314db.exe

    • Size

      43KB

    • MD5

      e1a244c5d1491aad1902df514af314db

    • SHA1

      5792f20685d9503b93ae07620911a9fc2cd5a7a6

    • SHA256

      3e356a29411ae2f9a8ca4019d58ca9ca71837b00c8587afbb5e3cad774ba7bc1

    • SHA512

      f07f143bde596cf2080a1240f721d96b0a2aeaeb0310700e95ab019d9506484fea6ca69a0408f0f821aa21c54b8caf5db02bab3338b374f3d8942ddb91270578

    • SSDEEP

      384:fTZyf9lkteXivmGUyeSRCymw5EBxE1UE+zwIij+ZsNO3PlpJKkkjh/TzF7pWnuml:fdElkQyvdhe8Ce4E6uXQ/oTC+L

    Score
    10/10
    njrathackeddiscoverytrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks