General
- Target Server.exe
- Size 93KB
- Sample240723-vx5pxstdrf
- SHA256 2f989ad111f928d16881307ae35863b3a66882328e0fa83bdfb585df1f0cd78b
- MD5 02ce775fb6776f450fc124ad0b22d5f2
- SHA1 034cfa9d440a9f92e8dbb2c71448d670765fc2ca
- SHA512 e2d02edeb93b7c5ef29aab43b893ab24c3cad6da891f0d6db4a9dc054cf2b6ab0900f95edfa823c3fb2aa8522a0c81bc5effd1151e7ae44b4bdb360d94df3e24
- SSDEEP 1536:TUxOx6baIa9RZj00ljEwzGi1dDxZD2gS:TUxbaIa93jNSi1drb
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
Server.exe
Resource
win7-20240705-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
Server.exe
Resource
win10-20240404-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
Server.exe
Resource
win10v2004-20240709-en
6 signatures
150 seconds
Behavioral task
behavioral4
Sample
Server.exe
Resource
win11-20240709-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
0.7d
Botnet
-
HacKed
C2
-
hakim32.ddns.net:2000
-
127.0.0.1:7777
Mutex
-
161f07265c479df878d7acb8e4ed815e
Attributes
-
reg_key
161f07265c479df878d7acb8e4ed815e
-
splitter
|'|'|
Targets
-
- Target Server.exe
- Size 93KB
- SHA256 2f989ad111f928d16881307ae35863b3a66882328e0fa83bdfb585df1f0cd78b
- MD5 02ce775fb6776f450fc124ad0b22d5f2
- SHA1 034cfa9d440a9f92e8dbb2c71448d670765fc2ca
- SHA512 e2d02edeb93b7c5ef29aab43b893ab24c3cad6da891f0d6db4a9dc054cf2b6ab0900f95edfa823c3fb2aa8522a0c81bc5effd1151e7ae44b4bdb360d94df3e24
- SSDEEP 1536:TUxOx6baIa9RZj00ljEwzGi1dDxZD2gS:TUxbaIa93jNSi1drb
- MD5 SHA1 SHA512 SSDEEP
-
Modifies Windows Firewall
MITRE ATT&CK Enterprise v15
Tasks
static1
hackednjrat
Score
10/10
behavioral1
discoveryevasionpersistenceprivilege_escalation
Score
8/10
behavioral2
discoveryevasionpersistenceprivilege_escalation
Score
8/10
behavioral3
discoveryevasionpersistenceprivilege_escalation
Score
8/10
behavioral4
discoveryevasionpersistenceprivilege_escalation
Score
8/10