General
- Target 1b622c451fcc9d83aad8bf45b1c42b5f.exe
- Size 93KB
- Sample260710-dpeebsdw9w
- SHA256 df4e36252bf8a2b1dee291bcaf9e0505246cacc1d1ea9db3494f30c8506ba0cb
- MD5 1b622c451fcc9d83aad8bf45b1c42b5f
- SHA1 2e70ac7f1bdfc2f9912448ee2b6c2c478bef3aab
- SHA512 df877ef862a83c54a397958742b17503c5938d1f585ae9f0aafcd21eaf8edace67229d089f1e638e57d97cf735819d17726edd6a1e266f42ff82882f5a8e1999
- SSDEEP 1536:UUNJD/HBZbszKu9AZp77r1jEwzGi1dD8DlgS:UUUzK4AZtHCi1dyy
- TLSH T19993E94977E52524E0BF56F75471F2014E34B48B1612E39D98F219AA0B33AC44F8AFEB
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
1b622c451fcc9d83aad8bf45b1c42b5f.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
1b622c451fcc9d83aad8bf45b1c42b5f.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
0.7d
Botnet
-
HacKed
C2
-
hakim32.ddns.net:2000
-
vpsserver1.viewdns.net:5552
Mutex
-
ea42ee28e5bc392390e677e3d6ca92b6
Attributes
-
reg_key
ea42ee28e5bc392390e677e3d6ca92b6
-
splitter
|'|'|
Targets
-
- Target 1b622c451fcc9d83aad8bf45b1c42b5f.exe
- Size 93KB
- SHA256 df4e36252bf8a2b1dee291bcaf9e0505246cacc1d1ea9db3494f30c8506ba0cb
- MD5 1b622c451fcc9d83aad8bf45b1c42b5f
- SHA1 2e70ac7f1bdfc2f9912448ee2b6c2c478bef3aab
- SHA512 df877ef862a83c54a397958742b17503c5938d1f585ae9f0aafcd21eaf8edace67229d089f1e638e57d97cf735819d17726edd6a1e266f42ff82882f5a8e1999
- SSDEEP 1536:UUNJD/HBZbszKu9AZp77r1jEwzGi1dD8DlgS:UUUzK4AZtHCi1dyy
- TLSH T19993E94977E52524E0BF56F75471F2014E34B48B1612E39D98F219AA0B33AC44F8AFEB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Firewall