Overview

overview

10

Static

static

10

Server.exe

windows7-x64

8

Server.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Server.zip

  • Size

    37KB

  • Sample

    241014-t5k5tayfkr

  • MD5

    042940a8e5c665f2fcdb2363e0a0ecb9

  • SHA1

    90bb14951db17325946d761f0e6925dda46e2840

  • SHA256

    15e3f7633e40b1984b8865624bdf8a7993f95af4a544bca2097ec517b406d9d6

  • SHA512

    91240732ae9b685965cac235d3397f4abd60330708679ced82aa619cb2e2d06ebd67961f607a4aec6628e57aaf1996dd0ec20cadec26bfc1406f22d9ebd41407

  • SSDEEP

    384:eS+6WIiejtCVLO309Qmykrt4QdqMjf+vWEWxrAF+rMRTyN/0L+EcoinblneHQM3X:EHdGdkrOGb+eE2rM+rMRa8Nuistk

Score
10/10
njrathackeddiscoveryevasionpersistenceprivilege_escalation

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

HacKed

C2

192.168.0.159:5552

Mutex

a07dd6977de8bb7c076e254367e125b2

Attributes
  • reg_key

    a07dd6977de8bb7c076e254367e125b2

  • splitter

    |'|'|

Targets

    • Target

      Server.exe

    • Size

      37KB

    • MD5

      3eb33ffef04410659b43ebdf8a82711b

    • SHA1

      a6142e6fd6bf75daef95c68d74a5c49ec3d5eb92

    • SHA256

      db8447da65e2e525179aadf32fdec52d0abe739cdeb41c6958cd2d3fcb396a44

    • SHA512

      8860ce6078ba0c2f88dd69056ead885a55034a092679a3eba8b10d95c6a9b1af84b5d57751608a1e90166aac25a7bacad98ad87c43545514cf069fac26818666

    • SSDEEP

      384:gS+6WIiejtCVLO309Qmykrt4QdqMjf+vWEWxrAF+rMRTyN/0L+EcoinblneHQM3m:KHdGdkrOGb+eE2rM+rMRa8Nuist

    Score
    8/10
    discoveryevasionpersistenceprivilege_escalation
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks