General
- Target 32قث.rar
- Size 31KB
- Sample260922-txchpsyekf
- SHA256 606d6c2cf9c068f70f0308385f3348d82224b24e31bf1d3c0aff25a1ad27e871
- MD5 444a9126ef3b8426f23aa0552495c81e
- SHA1 41d8ecfc60d6b8da2aeea11367ea46c6ecfe4cfa
- SHA512 90df99d07b9f8631b12f183c58df4f61ce6da11d4042e913631754c5abfa6b43f8efe09bd52ab4968a0af42ecc8c65168898a432b94fb000038b18c9a53980c8
- SSDEEP 768:lrSZUTk/dgY3dpf8j/ndNxsi1yJxRQCtldCX28:lrSyYtuzndN11oxRQ+dSN
- TLSH T1E2E2E14765427C56B38DBCE5D98F6C12F25AB10B2AA4DEC70800A291DBA235DFC57F0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
32قث/3بيبس.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
32قث/3بيبس.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
0.7d
Botnet
-
HacKed
C2
-
hakim32.ddns.net:2000
-
32.tcp.cpolar.top:14206
Mutex
-
07cc3fe186cc09bd0882c38da8f43377
Attributes
-
reg_key
07cc3fe186cc09bd0882c38da8f43377
-
splitter
|'|'|
Targets
-
- Target 32قث/3بيبس.exe
- Size 93KB
- SHA256 8bfa28dceea0b9fc93ee090fca4aa3eea1b83f0ef13293165fa0a5e80e9f1f45
- MD5 a3cf4a846d41523d65a7ea0332537860
- SHA1 a7e764ddb3b4a900693b1bf056b19e54f41246c5
- SHA512 8d70f91d471a768fafacf4c0fdcdfe05e53d6ae8645118a76ea15b2b66f7db527e73a1b680a9ff757360c457a9dec92b900a732572a4154697a0a2bd6f1b08a1
- SSDEEP 1536:+UwC+xhUa9urgOBPmNvM4jEwzGi1dDJDbgS:+UmUa9urgOkdGi1dNU
- TLSH T11593D74977E52524E4BF56F79472F2004E34B44B1602E39E49F259EA0A33AC44F89FEB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Firewall