General
- Target Server.exe
- Size 93KB
- Sample260608-jpm95aat2s
- SHA256 93407c318a469cbae95d31c8467b08d0ae10767f2af25e3f7c6834ca40f7a641
- MD5 3c1d16885eb866eff3b86f1f53fa9e84
- SHA1 3dd5609a683d2d529d63ac6bbbc5128c47c8a8aa
- SHA512 61acb7ed8f3f0195e81e2905fd0493a036731a8a2170525298bb2e19cf86dd82c6bebf1c9f5a9215b812fa5ea77aaa1c903948216da28e6f07ce88b48adc44be
- SSDEEP 1536:BUBedxQJ9waK7jh7CQjEwzGi1dDiDggS:BU8QJ9waK7jtCBi1dsJ
- TLSH T1F993D74977E52524E0BF66F79471B2004E34F44B1612E39D58F219AA1B33AC44F89FEB
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Server.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
Server.exe
Resource
win11-20260513-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
0.7d
Botnet
-
HacKed
C2
-
hakim32.ddns.net:2000
-
u888hk.com:443
Mutex
-
6120cbbbd640a881f51d245c2f731a45
Attributes
-
reg_key
6120cbbbd640a881f51d245c2f731a45
-
splitter
|'|'|
Targets
-
- Target Server.exe
- Size 93KB
- SHA256 93407c318a469cbae95d31c8467b08d0ae10767f2af25e3f7c6834ca40f7a641
- MD5 3c1d16885eb866eff3b86f1f53fa9e84
- SHA1 3dd5609a683d2d529d63ac6bbbc5128c47c8a8aa
- SHA512 61acb7ed8f3f0195e81e2905fd0493a036731a8a2170525298bb2e19cf86dd82c6bebf1c9f5a9215b812fa5ea77aaa1c903948216da28e6f07ce88b48adc44be
- SSDEEP 1536:BUBedxQJ9waK7jh7CQjEwzGi1dDiDggS:BU8QJ9waK7jtCBi1dsJ
- TLSH T1F993D74977E52524E0BF66F79471B2004E34F44B1612E39D58F219AA1B33AC44F89FEB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Firewall