General
- Target svClient.exe
- Size 94KB
- Sample241119-erecsa1bql
- SHA256 d9083880d4fc394283a1640392ddef37a72978800fe3e6cc25561369d888047a
- MD5 2ce6f0a9681d09ad541a00b640c4a7ce
- SHA1 e3bac43991c9571cbfc516d9c2a2dc21bb5612c8
- SHA512 57c0dc20fe771853f6d21654bd4ce7fb27ea60ee2bccac005779e6cec347628fd0b7b995aaab661a488c6511adcecf51d42545e7c2708ccaa100fef96ca36451
- SSDEEP 1536:nAWCI6dorHYPvgNFoOE6jEwzGi1dDE3QDAgS:nAEuorHYPvgNJEDi1dI3Sp
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
svClient.exe
Resource
win7-20240903-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
svClient.exe
Resource
win10v2004-20241007-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
0.7d
Botnet
-
HacKed
C2
-
hakim32.ddns.net:2000
Mutex
-
3688fb7716958cb73bc079332aca2d72
Attributes
-
reg_key
3688fb7716958cb73bc079332aca2d72
-
splitter
|'|'|
Targets
-
- Target svClient.exe
- Size 94KB
- SHA256 d9083880d4fc394283a1640392ddef37a72978800fe3e6cc25561369d888047a
- MD5 2ce6f0a9681d09ad541a00b640c4a7ce
- SHA1 e3bac43991c9571cbfc516d9c2a2dc21bb5612c8
- SHA512 57c0dc20fe771853f6d21654bd4ce7fb27ea60ee2bccac005779e6cec347628fd0b7b995aaab661a488c6511adcecf51d42545e7c2708ccaa100fef96ca36451
- SSDEEP 1536:nAWCI6dorHYPvgNFoOE6jEwzGi1dDE3QDAgS:nAEuorHYPvgNJEDi1dI3Sp
- MD5 SHA1 SHA512 SSDEEP
Score3/10