General
- Target phishing.exe
- Size 37KB
- Sample260509-rtlabscy4m
- SHA256 9b8b20173fd54c4109d8a1a00e47425cde6712a5ab3fde272f53d8a27be2c0c1
- MD5 145ee973f5dac9ad45a6d11022b5a740
- SHA1 6e4c563bf45f20753618dee7de961254df73ac27
- SHA512 5caee6f9f7a7a4ac74faf43613d7d78ccca25a1cc3a3a24cb7e2d1559a94e23622d0b500f75313b2654508a97ee00658be62db183e88a43d6e8c63f348f0d4fd
- SSDEEP 384:JSJcaCisL/WRdL5kyc/VwvrdvngiQx4prAF+rMRTyN/0L+EcoinblneHQM3epzXD:gJcgD5nc/VwBfFQQrM+rMRa8Nuset
- TLSH T12D033A4D7FE18168C5FD057B05B2D41207BAE04B6E23DA0ECEE564AA37636C18F54AF2
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
phishing.exe
Resource
win10v2004-20260130-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
phishing.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
im523
Botnet
-
HacKed
C2
-
phishing.perspectives-family.org:443
Mutex
-
b34b353de942952e3af51a70738a64f2
Attributes
-
reg_key
b34b353de942952e3af51a70738a64f2
-
splitter
|'|'|
Targets
-
- Target phishing.exe
- Size 37KB
- SHA256 9b8b20173fd54c4109d8a1a00e47425cde6712a5ab3fde272f53d8a27be2c0c1
- MD5 145ee973f5dac9ad45a6d11022b5a740
- SHA1 6e4c563bf45f20753618dee7de961254df73ac27
- SHA512 5caee6f9f7a7a4ac74faf43613d7d78ccca25a1cc3a3a24cb7e2d1559a94e23622d0b500f75313b2654508a97ee00658be62db183e88a43d6e8c63f348f0d4fd
- SSDEEP 384:JSJcaCisL/WRdL5kyc/VwvrdvngiQx4prAF+rMRTyN/0L+EcoinblneHQM3epzXD:gJcgD5nc/VwBfFQQrM+rMRa8Nuset
- TLSH T12D033A4D7FE18168C5FD057B05B2D41207BAE04B6E23DA0ECEE564AA37636C18F54AF2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Firewall