General
- Target Server.exe
- Size 93KB
- Sample261001-hsb6lasgnf
- SHA256 71ad0792762d4587c2b863f53b75d01a937ba3cd4117e670fa1245ecae4df77e
- MD5 4350f4845fe7b829ce79076f19304e5f
- SHA1 499c4871348216c548268126a54efdc0d717884b
- SHA512 ec7172a0114ee6a6c7d22c9d0741d3d1dc1e281e36a7737062b9bfc07d77e3a3ee986ae4010e40e26834e33860ff6eea6a3b4e736ab6b70949ba35a3c6660b56
- SSDEEP 768:iY3jgnD7O/pBcxYsbae6GIXb9pDX2t98PL0OXLeuXxrjEtCdnl2pi1Rz4Rk3vsGN:RgvOx6baIa9RZj00ljEwzGi1dDbDBgS
- TLSH T17793E84977E52524E5BF56F79871F2004E34B48B1602E39D48F219AA1B33AC44F89FEB
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Server.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
Server.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
0.7d
Botnet
-
da7eya
C2
-
hakim32.ddns.net:2000
-
127.0.0.1:5252
Mutex
-
7da00d3c1d1cd7ac186d8dd3955ff115
Attributes
-
reg_key
7da00d3c1d1cd7ac186d8dd3955ff115
-
splitter
|'|'|
Targets
-
- Target Server.exe
- Size 93KB
- SHA256 71ad0792762d4587c2b863f53b75d01a937ba3cd4117e670fa1245ecae4df77e
- MD5 4350f4845fe7b829ce79076f19304e5f
- SHA1 499c4871348216c548268126a54efdc0d717884b
- SHA512 ec7172a0114ee6a6c7d22c9d0741d3d1dc1e281e36a7737062b9bfc07d77e3a3ee986ae4010e40e26834e33860ff6eea6a3b4e736ab6b70949ba35a3c6660b56
- SSDEEP 768:iY3jgnD7O/pBcxYsbae6GIXb9pDX2t98PL0OXLeuXxrjEtCdnl2pi1Rz4Rk3vsGN:RgvOx6baIa9RZj00ljEwzGi1dDbDBgS
- TLSH T17793E84977E52524E5BF56F79871F2004E34B48B1602E39D48F219AA1B33AC44F89FEB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Firewall