General

  • Target

    Server2.exe

  • Size

    43KB

  • Sample

    241228-geh7bawlhw

  • MD5

    87ced1ba3c69b71f240b3f6c0b509da7

  • SHA1

    7789d982cd71a9a678dafe754e51fef694f52118

  • SHA256

    fbfbe53bab2fb9b06ed9df34a389a9529ff11cd0896486c883c0a26968f91099

  • SHA512

    e9af83946b47ebc0cde33716cbf9eaab2cda9d583a1a9cf293ca3070fd10e5065f92693a6f47afebdac6764a4511f95602159a589bf8ed7f26f584dee24f8284

  • SSDEEP

    384:3ZyjJ61STss7yKS9po7QAMExZZS23zsIij+ZsNO3PlpJKkkjh/TzF7pWnKmgreTf:J0Qk4smKS3OR9Z0OuXQ/ovC+L

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

92.253.28.170:5552

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Targets

    • Target

      Server2.exe

    • Size

      43KB

    • MD5

      87ced1ba3c69b71f240b3f6c0b509da7

    • SHA1

      7789d982cd71a9a678dafe754e51fef694f52118

    • SHA256

      fbfbe53bab2fb9b06ed9df34a389a9529ff11cd0896486c883c0a26968f91099

    • SHA512

      e9af83946b47ebc0cde33716cbf9eaab2cda9d583a1a9cf293ca3070fd10e5065f92693a6f47afebdac6764a4511f95602159a589bf8ed7f26f584dee24f8284

    • SSDEEP

      384:3ZyjJ61STss7yKS9po7QAMExZZS23zsIij+ZsNO3PlpJKkkjh/TzF7pWnKmgreTf:J0Qk4smKS3OR9Z0OuXQ/ovC+L

MITRE ATT&CK Enterprise v15

Tasks