General
- Target تعريف فضي وهمي.exe
- Size 93KB
- Sample260822-flstnavzbw
- SHA256 59efff7ca2cd1fdc3a6b48402045bb69c4d159ca8a3ca40bee99c3d0f90f5073
- MD5 5b0105c2acc57c371cac8a2e15578814
- SHA1 20b2956d8fbd41e090c0d9dda18c6c64dca26153
- SHA512 71ea40bb57b5a27f91ea125aad999e137995859c8d6a1a28d27f0ca65c880d236e1f0b1c9f45d8bf65dedf5c2877d39a1ce65b8386ce77c55de9aa64c22c83b6
- SSDEEP 1536:1U4FQWqkqqoLc2m+iIjEwzGi1dDpUDNgS:1U4mkqqoA2xi5i1dga
- TLSH T17B93E84977E56564E1BF56F79471F2004E34B48B1602E39D48F219AB0A33AC48F89FEB
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
تعريف فضي وهمي.exe
Resource
win10ltsc2021-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
تعريف فضي وهمي.exe
Resource
win11-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
تعريف فضي وهمي.exe
Resource
win11ltsc2024-20260710-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
0.7d
Botnet
-
تعريف فضي وهمي
C2
-
hakim32.ddns.net:2000
-
127.0.0.1:5552
Mutex
-
f0151d36f624e8ec1ac198a6ac1ab9e3
Attributes
-
reg_key
f0151d36f624e8ec1ac198a6ac1ab9e3
-
splitter
|'|'|
Targets
-
- Target تعريف فضي وهمي.exe
- Size 93KB
- SHA256 59efff7ca2cd1fdc3a6b48402045bb69c4d159ca8a3ca40bee99c3d0f90f5073
- MD5 5b0105c2acc57c371cac8a2e15578814
- SHA1 20b2956d8fbd41e090c0d9dda18c6c64dca26153
- SHA512 71ea40bb57b5a27f91ea125aad999e137995859c8d6a1a28d27f0ca65c880d236e1f0b1c9f45d8bf65dedf5c2877d39a1ce65b8386ce77c55de9aa64c22c83b6
- SSDEEP 1536:1U4FQWqkqqoLc2m+iIjEwzGi1dDpUDNgS:1U4mkqqoA2xi5i1dga
- TLSH T17B93E84977E56564E1BF56F79471F2004E34B48B1602E39D48F219AB0A33AC48F89FEB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Firewall