General
-
Target
Server.exe
-
Size
93KB
-
Sample
240929-xmrreswdrk
-
MD5
50d608474600af4b0e84588d0b3fca31
-
SHA1
88e938d2593a80cf125e17593d2db489b2c835e2
-
SHA256
3175a47ef124f34e3722c407003b2c6d9f047ab8bf842d47007fb3fd94cd0e1e
-
SHA512
f1c96d6b68910514b0bbe8f7a90693c8fbfc2358cb1b97983703026531a12e8e87afc918e78e2c38c014247cc51fa83dfa60ef56b817d819f2426a6c7f431435
-
SSDEEP
768:tY3wUnD9O/pBcxYsbae6GIXb9pDX2t98PL0OXLeuXxrjEtCdnl2pi1Rz4Rk3CsG1:HUxOx6baIa9RZj00ljEwzGi1dDeDhgS
Behavioral task
behavioral1
Sample
Server.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
Server.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
njrat
0.7d
HacKed
hakim32.ddns.net:2000
127.0.0.1:8080
47639010a05125b9f7b420f26d9bb0dc
-
reg_key
47639010a05125b9f7b420f26d9bb0dc
-
splitter
|'|'|
Targets
-
-
Target
Server.exe
-
Size
93KB
-
MD5
50d608474600af4b0e84588d0b3fca31
-
SHA1
88e938d2593a80cf125e17593d2db489b2c835e2
-
SHA256
3175a47ef124f34e3722c407003b2c6d9f047ab8bf842d47007fb3fd94cd0e1e
-
SHA512
f1c96d6b68910514b0bbe8f7a90693c8fbfc2358cb1b97983703026531a12e8e87afc918e78e2c38c014247cc51fa83dfa60ef56b817d819f2426a6c7f431435
-
SSDEEP
768:tY3wUnD9O/pBcxYsbae6GIXb9pDX2t98PL0OXLeuXxrjEtCdnl2pi1Rz4Rk3CsG1:HUxOx6baIa9RZj00ljEwzGi1dDeDhgS
-
Modifies Windows Firewall
-