General
- Target 4444444cxvcxvnytuj658790.exe
- Size 93KB
- Sample261004-tlk1pssakf
- SHA256 f62b24733ea053c997aa23941d1611da5eb7cd8179b1ff21df7ff37fef044726
- MD5 83e89fc6e715235ff5d69b86b02fdc20
- SHA1 8f4b602aca30bc1927a3fb75da045c9121a388fb
- SHA512 fe6bebfdfeeeae2ffbbfb06647fc76d717404ded8138e2540ea47a51b7a99704aed2929e16bc45ca2e62a8742cd5c83c37cb905050766f401b1222934fbaea72
- SSDEEP 768:oY33UnD9O/pBcxYsbae6GIXb9pDX2t9zPL0OXLeuXxrjEtCdnl2pi1Rz4Rk3jsGW:HUxOx6baIa9ROj00ljEwzGi1dDPDIgS
- TLSH T19793E74977E52524E5BF56F79871F2004E34B48B1602E39D48F219AA1B33AC44F89FEB
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
4444444cxvcxvnytuj658790.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
0.7d
Botnet
-
HacKed
C2
-
hakim32.ddns.net:2000
-
127.0.0.1:7823
Mutex
-
e3c0b9f00a5e938dce0a10ec281db14b
Attributes
-
reg_key
e3c0b9f00a5e938dce0a10ec281db14b
-
splitter
|'|'|
Targets
-
- Target 4444444cxvcxvnytuj658790.exe
- Size 93KB
- SHA256 f62b24733ea053c997aa23941d1611da5eb7cd8179b1ff21df7ff37fef044726
- MD5 83e89fc6e715235ff5d69b86b02fdc20
- SHA1 8f4b602aca30bc1927a3fb75da045c9121a388fb
- SHA512 fe6bebfdfeeeae2ffbbfb06647fc76d717404ded8138e2540ea47a51b7a99704aed2929e16bc45ca2e62a8742cd5c83c37cb905050766f401b1222934fbaea72
- SSDEEP 768:oY33UnD9O/pBcxYsbae6GIXb9pDX2t9zPL0OXLeuXxrjEtCdnl2pi1Rz4Rk3jsGW:HUxOx6baIa9ROj00ljEwzGi1dDPDIgS
- TLSH T19793E74977E52524E5BF56F79871F2004E34B48B1602E39D48F219AA1B33AC44F89FEB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Firewall