General
- Target Server.exe
- Size 37KB
- Sample260910-bw866svzey
- SHA256 4cc16cafe71c8ffee2f9a39d63257f89b57c7773c6ed071411dce3b79756a4f4
- MD5 b7b83523848dfc9e769e4ad0010eb178
- SHA1 d7809a8227a091bf907256099213aeef53996af4
- SHA512 db318daefa1f5f3b9ddcb849500e184748f5005bc9ea17081b0ab7cb59dfd0a97b7d71082990e16b7b24150b9e646af3dbc99162428a7cd26547da5f4bb3b579
- SSDEEP 384:hS9MiLdBndznNCyMGmpcaPxzcG2DrsrAF+rMRTyN/0L+EcoinblneHQM3epzXzNZ:AjRNRMGmp9J123srM+rMRa8NuZlt
- TLSH T1B8034B4D7BE18568C5FD057B05B2D42207BAE04F6E23D90E8EF564AA37636C08B54EF2
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Server.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Server.exe
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
im523
Botnet
-
HacKed
C2
-
sfufgdsg-56299.portmap.host:56299
Mutex
-
4d52240e8765d607cb53ebfc14d1bb29
Attributes
-
reg_key
4d52240e8765d607cb53ebfc14d1bb29
-
splitter
|'|'|
Targets
-
- Target Server.exe
- Size 37KB
- SHA256 4cc16cafe71c8ffee2f9a39d63257f89b57c7773c6ed071411dce3b79756a4f4
- MD5 b7b83523848dfc9e769e4ad0010eb178
- SHA1 d7809a8227a091bf907256099213aeef53996af4
- SHA512 db318daefa1f5f3b9ddcb849500e184748f5005bc9ea17081b0ab7cb59dfd0a97b7d71082990e16b7b24150b9e646af3dbc99162428a7cd26547da5f4bb3b579
- SSDEEP 384:hS9MiLdBndznNCyMGmpcaPxzcG2DrsrAF+rMRTyN/0L+EcoinblneHQM3epzXzNZ:AjRNRMGmp9J123srM+rMRa8NuZlt
- TLSH T1B8034B4D7BE18568C5FD057B05B2D42207BAE04F6E23D90E8EF564AA37636C08B54EF2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Firewall