General
- Target Server.exe
- Size 93KB
- Sample261001-hrhlzssfpd
- SHA256 4150069254c255c5afe3940a847432d3fbafc5a3df262ab976e4bd9ffb3bce26
- MD5 ba67fcd9f144908a106f9c2802a691dd
- SHA1 895e47805acc206c6d484b0dea27187f3d9b9af0
- SHA512 ae99d5f28577fa1cde24782e06d470db586183c6e7aa6077e959e458d86f7898ad49434b99f4259a10779c5e030545c9959543cf6fa172e96207c8879ce624b0
- SSDEEP 768:jY3jgnD7O/pBcxYsbae6GIXb9pDX2t98PL0OXLeuXxrjEtCdnl2pi1Rz4Rk3wsGC:mgvOx6baIa9RZj00ljEwzGi1dDIDUgS
- TLSH T1B793E84977E52524E5BF56F79871F2004E34B48B1602E39D48F219AA1B33AC44F89FEB
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Server.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
Server.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
0.7d
Botnet
-
da7eya
C2
-
hakim32.ddns.net:2000
-
127.0.0.1:5552
Mutex
-
3c184fca1fe925586a2729b337411e46
Attributes
-
reg_key
3c184fca1fe925586a2729b337411e46
-
splitter
|'|'|
Targets
-
- Target Server.exe
- Size 93KB
- SHA256 4150069254c255c5afe3940a847432d3fbafc5a3df262ab976e4bd9ffb3bce26
- MD5 ba67fcd9f144908a106f9c2802a691dd
- SHA1 895e47805acc206c6d484b0dea27187f3d9b9af0
- SHA512 ae99d5f28577fa1cde24782e06d470db586183c6e7aa6077e959e458d86f7898ad49434b99f4259a10779c5e030545c9959543cf6fa172e96207c8879ce624b0
- SSDEEP 768:jY3jgnD7O/pBcxYsbae6GIXb9pDX2t98PL0OXLeuXxrjEtCdnl2pi1Rz4Rk3wsGC:mgvOx6baIa9RZj00ljEwzGi1dDIDUgS
- TLSH T1B793E84977E52524E5BF56F79871F2004E34B48B1602E39D48F219AA1B33AC44F89FEB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Firewall