Overview

overview

10

Static

static

10

prins.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    prins.exe

  • Size

    43KB

  • Sample

    250405-vhv7yavmz3

  • MD5

    d51b25e205220ae85d56de9a74968295

  • SHA1

    c3eba0f1c06280ad634c126e133f486442ef6165

  • SHA256

    e5e7287cf37a074f6b8a35940407212a695e81e921d42b3b890bd283ae0637cd

  • SHA512

    4e79c2030715d68d859c160b7969c6975682f047192c37e569fe271b3b1b30611435cf461b33e640cd9f9ba5fbb83da9762f1f83133c2a00d32a6c125b0e8379

  • SSDEEP

    384:iZyavHn1iDcsyEqtBfkEGCOEhGyOEtzcIij+ZsNO3PlpJKkkjh/TzF7pWnAA/gra:Q9HnU4pEqtNkE5SyZuXQ/oc3+L

Score
10/10
njrathackeddiscoverypersistencetrojan

Malware Config

Extracted

Family

njrat

Version

Njrat 0.7 Golden By Hassan Amiri

Botnet

HacKed

C2

127.0.0.1:8848

Mutex

Windows Update

Attributes
  • reg_key

    Windows Update

  • splitter

    |Hassan|

Targets

    • Target

      prins.exe

    • Size

      43KB

    • MD5

      d51b25e205220ae85d56de9a74968295

    • SHA1

      c3eba0f1c06280ad634c126e133f486442ef6165

    • SHA256

      e5e7287cf37a074f6b8a35940407212a695e81e921d42b3b890bd283ae0637cd

    • SHA512

      4e79c2030715d68d859c160b7969c6975682f047192c37e569fe271b3b1b30611435cf461b33e640cd9f9ba5fbb83da9762f1f83133c2a00d32a6c125b0e8379

    • SSDEEP

      384:iZyavHn1iDcsyEqtBfkEGCOEhGyOEtzcIij+ZsNO3PlpJKkkjh/TzF7pWnAA/gra:Q9HnU4pEqtNkE5SyZuXQ/oc3+L

    Score
    10/10
    njrathackeddiscoverypersistencetrojan
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks