Overview

overview

10

Static

static

10

Kaspersky.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Kaspersky.exe

  • Size

    93KB

  • Sample

    250329-nbl75atms8

  • MD5

    21086f6e286e14d92875c313f5807222

  • SHA1

    5f980d447ea546062d0980f1611009c44249678e

  • SHA256

    579308fdc781bdf6f4500650c1cbd99e41c82e5ce3b08f6d4cf0ac0d1e47a043

  • SHA512

    bc9b67143c559243ea752b205dbb72493f14741c80db2f1a41d1d2e7606c73e70eeae32a35a19735045144ab0e9dc337d63568fe88f0756b321db8f5257b180e

  • SSDEEP

    768:ZY3Rl530YTXspgM0m2zGjpyDtdXWuDtXfLWh2XxrjEtCdnl2pi1Rz4Rk3msGdpG3:ilZ0AA0mT1mrWgLljEwzGi1dDiDGgS

Score
10/10
njratpupsikdiscovery

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

Pupsik

C2

hakim32.ddns.net:2000

0.tcp.eu.ngrok.io:18053
Mutex

2a09aa82ef55b15310188afa64c92d56

Attributes
  • reg_key

    2a09aa82ef55b15310188afa64c92d56

  • splitter

    |'|'|

Targets

    • Target

      Kaspersky.exe

    • Size

      93KB

    • MD5

      21086f6e286e14d92875c313f5807222

    • SHA1

      5f980d447ea546062d0980f1611009c44249678e

    • SHA256

      579308fdc781bdf6f4500650c1cbd99e41c82e5ce3b08f6d4cf0ac0d1e47a043

    • SHA512

      bc9b67143c559243ea752b205dbb72493f14741c80db2f1a41d1d2e7606c73e70eeae32a35a19735045144ab0e9dc337d63568fe88f0756b321db8f5257b180e

    • SSDEEP

      768:ZY3Rl530YTXspgM0m2zGjpyDtdXWuDtXfLWh2XxrjEtCdnl2pi1Rz4Rk3msGdpG3:ilZ0AA0mT1mrWgLljEwzGi1dDiDGgS

    Score
    3/10
    discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks