General
- Target creative.exe
- Size 93KB
- Sample260828-f53g7seq8v
- SHA256 ab695019d82ee425352036d31cac0926ff8c4647cf782df3a324307cf3a18aea
- MD5 118efb4d3fa46b3b3d61dfad69f2ffbb
- SHA1 29cc482fa08624dc0bc0f17887fbbbb8d60260e2
- SHA512 781f4d06815ae646e831f388db1ecc2e88aef594a972f8dfca4549178c734aca18786ca51afefffc49bb8d48ac14250365ee643399bf8ddfa6601384693be551
- SSDEEP 1536:nU/r7EkrjaFIs7E5OxzJn8LjEwzGi1dDuDngS:nU7jau5OVVni1dwg
- TLSH T12493D74977E56564E0BF56F79871F2004E34B44B1602E39E48F259AB0B33AC44F89FEA
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
creative.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
creative.exe
Resource
win10ltsc2021-20260513-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
0.7d
Botnet
-
HacKed
C2
-
hakim32.ddns.net:2000
-
romeokroom-34945.portmap.host:34945
Mutex
-
f5450982fa71e98117016389dd9aee1d
Attributes
-
reg_key
f5450982fa71e98117016389dd9aee1d
-
splitter
|'|'|
Targets
-
- Target creative.exe
- Size 93KB
- SHA256 ab695019d82ee425352036d31cac0926ff8c4647cf782df3a324307cf3a18aea
- MD5 118efb4d3fa46b3b3d61dfad69f2ffbb
- SHA1 29cc482fa08624dc0bc0f17887fbbbb8d60260e2
- SHA512 781f4d06815ae646e831f388db1ecc2e88aef594a972f8dfca4549178c734aca18786ca51afefffc49bb8d48ac14250365ee643399bf8ddfa6601384693be551
- SSDEEP 1536:nU/r7EkrjaFIs7E5OxzJn8LjEwzGi1dDuDngS:nU7jau5OVVni1dwg
- TLSH T12493D74977E56564E0BF56F79871F2004E34B44B1602E39E48F259AB0B33AC44F89FEA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Firewall