General
- Target Server.exe
- Size 37KB
- Sample260511-nbb26ags8s
- SHA256 5eb82603dfcf5052f2ccbae3f74e079af704648014dd2d490808e2a1478db530
- MD5 dd1ed3aecf54bb6df1e651743e05ce34
- SHA1 dcab9fca43ae380962b5eeb123121fab20d516c1
- SHA512 3defbdfda061fb1338133676898d1cb0a20a4a5e76bbeb353c32fc8903acde3b07d6b72b6a6b9d63b6f83094e3ef8b51ab5b57df46f101644d90846884aaf42b
- SSDEEP 384:m+SmVSikmV0NVtv/Vey0bucvb6s28vsZrAF+rMRTyN/0L+EcoinblneHQM3epzXE:/XpO1VV0buc+l8irM+rMRa8Nu0Xt
- TLSH T1CD033A4D7FE18568C5FD097B06B2D41207BAE00B6E23D90E9EE564AA37636C18F50AF1
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Server.exe
Resource
win10v2004-20260130-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Server.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
im523
Botnet
-
HacKed
C2
-
127.0.0.1:5552
-
za7a7a7af-30396.portmap.host:5552
Mutex
-
0054674cb021e0835aa0960ff73c4eba
Attributes
-
reg_key
0054674cb021e0835aa0960ff73c4eba
-
splitter
|'|'|
Targets
-
- Target Server.exe
- Size 37KB
- SHA256 5eb82603dfcf5052f2ccbae3f74e079af704648014dd2d490808e2a1478db530
- MD5 dd1ed3aecf54bb6df1e651743e05ce34
- SHA1 dcab9fca43ae380962b5eeb123121fab20d516c1
- SHA512 3defbdfda061fb1338133676898d1cb0a20a4a5e76bbeb353c32fc8903acde3b07d6b72b6a6b9d63b6f83094e3ef8b51ab5b57df46f101644d90846884aaf42b
- SSDEEP 384:m+SmVSikmV0NVtv/Vey0bucvb6s28vsZrAF+rMRTyN/0L+EcoinblneHQM3epzXE:/XpO1VV0buc+l8irM+rMRa8Nu0Xt
- TLSH T1CD033A4D7FE18568C5FD097B06B2D41207BAE00B6E23D90E9EE564AA37636C18F50AF1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Firewall