Overview

overview

10

Static

static

10

Server.exe

windows7-x64

8

Server.exe

windows10-2004-x64

8

Resubmissions

28/03/2025, 16:53

250328-vdxvzaywfv 10

24/03/2025, 18:20

250324-wy8zeaxmx6 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Server.exe

  • Size

    93KB

  • Sample

    250328-vdxvzaywfv

  • MD5

    baf41f63bc78adc8c6d2436c8f37639a

  • SHA1

    e4c599d34c45f9afc8a33f7fab431940d8471708

  • SHA256

    05a2f56026b5a9e1ea1684b9a2a91a1cd814415f463c4b35626784d377891b54

  • SHA512

    f7b982de9411419132be9fa6ef0a050b99d56a97f5b23899e783250d847840fa336dea116ae92a547ab894d64997293601bda5c4145a18968cace8fac310d1ba

  • SSDEEP

    1536:OUwC+xhUa9urgOBPRNvM4jEwzGi1dDeDMgS:OUmUa9urgObdGi1dQl

Score
10/10
njrathackeddefense_evasiondiscoverypersistenceprivilege_escalation

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

hakim32.ddns.net:2000

september-idol.gl.at.ply.gg:60127
Mutex

a07ed3473b57c095d69710069d48f926

Attributes
  • reg_key

    a07ed3473b57c095d69710069d48f926

  • splitter

    |'|'|

Targets

    • Target

      Server.exe

    • Size

      93KB

    • MD5

      baf41f63bc78adc8c6d2436c8f37639a

    • SHA1

      e4c599d34c45f9afc8a33f7fab431940d8471708

    • SHA256

      05a2f56026b5a9e1ea1684b9a2a91a1cd814415f463c4b35626784d377891b54

    • SHA512

      f7b982de9411419132be9fa6ef0a050b99d56a97f5b23899e783250d847840fa336dea116ae92a547ab894d64997293601bda5c4145a18968cace8fac310d1ba

    • SSDEEP

      1536:OUwC+xhUa9urgOBPRNvM4jEwzGi1dDeDMgS:OUmUa9urgObdGi1dQl

    Score
    8/10
    defense_evasiondiscoverypersistenceprivilege_escalation
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks