Overview

overview

10

Static

static

10

Server.exe

windows10-2004-x64

8

Server.exe

windows10-ltsc 2021-x64

8

Server.exe

windows11-21h2-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Server.exe

  • Size

    93KB

  • Sample

    241209-r18dfawkam

  • MD5

    aefe80e4e229c3e197d525a30bbf1c5c

  • SHA1

    8f41c9ca904594e20265a160305ab46193f34239

  • SHA256

    b96820dd387a8ee24604406c5c308edcac2bd5e165dab66e6ef12b1ef8ef02a3

  • SHA512

    dede337bd34817db5f0e45c18907cc8001e6a212ddda8dbe3a2d07010507c8e4b60d26b409e6dc5f4bde7f7ca2b81d714f8c1ce1c4c352ff613dfffdb2980bdd

  • SSDEEP

    768:fY3Gli6xgrKSMZAZL28d2WmtlX+jRoI++WqXxrjEtCdnl2pi1Rz4Rk3tsGdpMgS7:Plvxg1L2AZmDO+2jEwzGi1dD9DMgS

Score
10/10
njratfaggotdiscoveryevasionpersistenceprivilege_escalation

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

faggot

C2

hakim32.ddns.net:2000

127.0.0.1:5552
Mutex

fef8bf491ce37325c8607285ba9cd6ff

Attributes
  • reg_key

    fef8bf491ce37325c8607285ba9cd6ff

  • splitter

    |'|'|

Targets

    • Target

      Server.exe

    • Size

      93KB

    • MD5

      aefe80e4e229c3e197d525a30bbf1c5c

    • SHA1

      8f41c9ca904594e20265a160305ab46193f34239

    • SHA256

      b96820dd387a8ee24604406c5c308edcac2bd5e165dab66e6ef12b1ef8ef02a3

    • SHA512

      dede337bd34817db5f0e45c18907cc8001e6a212ddda8dbe3a2d07010507c8e4b60d26b409e6dc5f4bde7f7ca2b81d714f8c1ce1c4c352ff613dfffdb2980bdd

    • SSDEEP

      768:fY3Gli6xgrKSMZAZL28d2WmtlX+jRoI++WqXxrjEtCdnl2pi1Rz4Rk3tsGdpMgS7:Plvxg1L2AZmDO+2jEwzGi1dD9DMgS

    Score
    8/10
    discoveryevasionpersistenceprivilege_escalation
    behavioral1behavioral2behavioral3

MITRE ATT&CK Enterprise v15

Tasks