General

  • Target
    Server.exe
  • Size 37KB
  • Sample260926-khv7tsyerf
  • SHA256 79c9c022e8287be6c261be3afd3ebb6721f065dd4733bc883d593ffe183f44e2
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • njrat

Version
  • im523

Botnet
  • HacKed

C2
  • 22.tcp.vip.cpolar.cn:11234

Mutex
  • d998446516f5332ff4fed41a20848fd2

Attributes
  • reg_key

    d998446516f5332ff4fed41a20848fd2

  • splitter

    |'|'|

Targets

    • Target
      Server.exe
    • Size 37KB
    • SHA256 79c9c022e8287be6c261be3afd3ebb6721f065dd4733bc883d593ffe183f44e2
    • MD5 SHA1 SHA512 SSDEEP TLSH

MITRE ATT&CK Enterprise v16

Tasks