General
- Target Server.exe
- Size 43KB
- Sample260518-2qlrsshw7n
- SHA256 5938d50c3815ea292131fd9c15775e28fc3b1d353a1a7774e1b67e3a339ce425
- MD5 99941dcf15d32c6b080b277a32d30a9b
- SHA1 0eab1f1fbcfa277cac3ae14423a36f884324e936
- SHA512 5605dd507987a71c2067ab0c26033d37a83add91b67f2b495d2b334441c4509ca6caebd1b4301c71aead7955483a5cb81393f149f7d0bbb28184a3bc4c86f59b
- SSDEEP 384:aHZyIgNkli0yiIf7StOW8eSlrETzq7V8zkIij+ZsNO3PlpJKkkjh/TzF7pWnimgW:a5W6ABi47StOW8eyaG4uXQ/o7C+L
- TLSH T10D13C64DB694E174D5FF8BF1A4A2B2890B70A01BA902930F99F154D94FB3AC09611EE7
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Server.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
Njrat 0.7 Golden By Hassan Amiri
Botnet
-
HacKed
C2
-
ncat iraqrklwt-30656.portmap.host:1337
Mutex
-
Windows Update
Attributes
-
reg_key
Windows Update
-
splitter
|Hassan|
Targets
-
- Target Server.exe
- Size 43KB
- SHA256 5938d50c3815ea292131fd9c15775e28fc3b1d353a1a7774e1b67e3a339ce425
- MD5 99941dcf15d32c6b080b277a32d30a9b
- SHA1 0eab1f1fbcfa277cac3ae14423a36f884324e936
- SHA512 5605dd507987a71c2067ab0c26033d37a83add91b67f2b495d2b334441c4509ca6caebd1b4301c71aead7955483a5cb81393f149f7d0bbb28184a3bc4c86f59b
- SSDEEP 384:aHZyIgNkli0yiIf7StOW8eSlrETzq7V8zkIij+ZsNO3PlpJKkkjh/TzF7pWnimgW:a5W6ABi47StOW8eyaG4uXQ/o7C+L
- TLSH T10D13C64DB694E174D5FF8BF1A4A2B2890B70A01BA902930F99F154D94FB3AC09611EE7
- MD5 SHA1 SHA512 SSDEEP TLSH