General
- Target Server.exe
- Size 37KB
- Sample260910-bwm9pstbnh
- SHA256 f733f12ca73e8632fa37d8e8fe411d4233aa1dca685b4ae9d8549ef203638a4e
- MD5 d787257d85c7ff99919563c5325629f6
- SHA1 2352d8b5e51a383bc92faa7915f34ee91f4d5d70
- SHA512 a53282fd224797dbf57064c291f30d672b47268fc7875815135aa28a7da44e64a44eb389d1217b787c4a3b6ae211347ac56d6bd2ad7c23a51ff62ef3b687ea58
- SSDEEP 384:Vy9KoixJNl7OHg1WykrVFX508e2/mJrAF+rMRTyN/0L+EcoinblneHQM3epzXdTy:E9+R1NkrVF6t2UrM+rMRa8Nuzmt
- TLSH T1D4034B4D7FE18568C5FD0A7705B2D02207BAE04B6E23D90E8EF5649A37636C18F50AF2
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Server.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
Server.exe
Resource
win10ltsc2021-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
Server.exe
Resource
win11-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral4
Sample
Server.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
im523
Botnet
-
HacKed
C2
-
sfufgdsg-56299.portmap.host:501
Mutex
-
cfa4c236c01d0e5a0235de6cc1fed794
Attributes
-
reg_key
cfa4c236c01d0e5a0235de6cc1fed794
-
splitter
|'|'|
Targets
-
- Target Server.exe
- Size 37KB
- SHA256 f733f12ca73e8632fa37d8e8fe411d4233aa1dca685b4ae9d8549ef203638a4e
- MD5 d787257d85c7ff99919563c5325629f6
- SHA1 2352d8b5e51a383bc92faa7915f34ee91f4d5d70
- SHA512 a53282fd224797dbf57064c291f30d672b47268fc7875815135aa28a7da44e64a44eb389d1217b787c4a3b6ae211347ac56d6bd2ad7c23a51ff62ef3b687ea58
- SSDEEP 384:Vy9KoixJNl7OHg1WykrVFX508e2/mJrAF+rMRTyN/0L+EcoinblneHQM3epzXdTy:E9+R1NkrVF6t2UrM+rMRa8Nuzmt
- TLSH T1D4034B4D7FE18568C5FD0A7705B2D02207BAE04B6E23D90E8EF5649A37636C18F50AF2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Firewall
MITRE ATT&CK Enterprise v16
Tasks
static1
hackedtrojannjrat
Score
10/10
behavioral1
defense_evasiondiscoverypersistenceprivilege_escalation
Score
8/10
behavioral2
defense_evasiondiscoverypersistenceprivilege_escalation
Score
8/10
behavioral3
defense_evasiondiscoverypersistenceprivilege_escalation
Score
8/10
behavioral4
defense_evasiondiscoverypersistenceprivilege_escalation
Score
8/10