General
- Target Server.exe
- Size 93KB
- Sample240717-q2pr2swfpg
- SHA256 77db776005273036e4086bfbacc1311204b0afeb6db96d9a2e30fdf6346f03c9
- MD5 6231b36fd29e6a7245120fc7ecb9dca3
- SHA1 66550bb56689155f67a229157d540cf31f2418dd
- SHA512 e7a73c80943e9df790d4d1366b0609533b4fddf8caa06a997e784a6f4a90139c64dadb27a77fda243301586202c265532f3e8e7411a7be410fd18edbf47677bb
- SSDEEP 1536:gU/r7EkrjaFIs7E5Ox8Jn8njEwzGi1dDXDlgS:gU7jau5OKVLi1dXy
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
Server.exe
Resource
win7-20240705-en
5 signatures
1800 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
0.7d
Botnet
-
HacKed
C2
-
hakim32.ddns.net:2000
-
growth-thereafter.gl.at.ply.gg:1580
Mutex
-
2be94cb76432991625c69696499ace62
Attributes
-
reg_key
2be94cb76432991625c69696499ace62
-
splitter
|'|'|
Targets
-
- Target Server.exe
- Size 93KB
- SHA256 77db776005273036e4086bfbacc1311204b0afeb6db96d9a2e30fdf6346f03c9
- MD5 6231b36fd29e6a7245120fc7ecb9dca3
- SHA1 66550bb56689155f67a229157d540cf31f2418dd
- SHA512 e7a73c80943e9df790d4d1366b0609533b4fddf8caa06a997e784a6f4a90139c64dadb27a77fda243301586202c265532f3e8e7411a7be410fd18edbf47677bb
- SSDEEP 1536:gU/r7EkrjaFIs7E5Ox8Jn8njEwzGi1dDXDlgS:gU7jau5OKVLi1dXy
- MD5 SHA1 SHA512 SSDEEP
Score8/10-
Modifies Windows Firewall