General
- Target Se6rver.exe
- Size 37KB
- Sample240621-ppjjtstdkq
- SHA256 73345d3826004e2ab696b4484ff25dc96e13592ea13b478e0a34c62b922ab9b2
- MD5 ad2e4667bd87a1fed204459689032f26
- SHA1 77bda45c2ae3ae2bc6e7c91d075345d365811f49
- SHA512 3a0739856b26f12f53966b8845f1ea1503189179838af9372f302957bbd6ac48b72f320a237bb07357de2ad3c3125d542a2af7fecec584b51cc700e6784ed964
- SSDEEP 384:K6l+yw7BeAaXaEiVbzdmB0O4yUvNixgp+Z2v/RYJ/oM6IxrAF+rMRTyN/0L+Ecow:Hcyw79POTUvNZYv64rM+rMRa8NuqEbt
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
Se6rver.exe
Resource
win10v2004-20240508-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
im523
Botnet
-
HacKed
C2
-
5.164.206.228:1604
Mutex
-
922d4000054e6c65c6e4a19521892af0
Attributes
-
reg_key
922d4000054e6c65c6e4a19521892af0
-
splitter
|'|'|
Targets
-
- Target Se6rver.exe
- Size 37KB
- SHA256 73345d3826004e2ab696b4484ff25dc96e13592ea13b478e0a34c62b922ab9b2
- MD5 ad2e4667bd87a1fed204459689032f26
- SHA1 77bda45c2ae3ae2bc6e7c91d075345d365811f49
- SHA512 3a0739856b26f12f53966b8845f1ea1503189179838af9372f302957bbd6ac48b72f320a237bb07357de2ad3c3125d542a2af7fecec584b51cc700e6784ed964
- SSDEEP 384:K6l+yw7BeAaXaEiVbzdmB0O4yUvNixgp+Z2v/RYJ/oM6IxrAF+rMRTyN/0L+Ecow:Hcyw79POTUvNZYv64rM+rMRa8NuqEbt
- MD5 SHA1 SHA512 SSDEEP
Score8/10-
Modifies Windows Firewall