General
- Target Server.exe
- Size 43KB
- Sample261023-rnfsnab19x
- SHA256 04124dcfa011c61c30cc980d91aaa11bbd5a022a15d5cd5302f02e6dd761c1f2
- MD5 a86d45ba0482e27589253c3a64b3b60e
- SHA1 3869f3c42393c215fe2cdf9ed6328d488f0a26a4
- SHA512 867251728675d20130b280ca2373f578c4a1240bf5551928c9baf4dfd046e8f292ae8b6a6105f5d5ae75c45235c75eb929f02ab7712c5adf1a068a046db38700
- SSDEEP 384:tZyKGNUst+3gUy6jjhK6qEs1tJqzQIij+ZsNO3PlpJKkkjh/TzF7pWnbmgreT0pe:HSwQh6/h1u14uXQ/omC+L
- TLSH T15713D78DB694E174D5FF8BF1B4A2B2890B71A017A802930F99F154D94FB3EC09611EE7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
Server.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
Server.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
Njrat 0.7 Golden By Hassan Amiri
Botnet
-
HacKed
C2
-
28.tcp.cpolar.top:10987
Mutex
-
Windows Update
Attributes
-
reg_key
Windows Update
-
splitter
|Hassan|
Targets
-
- Target Server.exe
- Size 43KB
- SHA256 04124dcfa011c61c30cc980d91aaa11bbd5a022a15d5cd5302f02e6dd761c1f2
- MD5 a86d45ba0482e27589253c3a64b3b60e
- SHA1 3869f3c42393c215fe2cdf9ed6328d488f0a26a4
- SHA512 867251728675d20130b280ca2373f578c4a1240bf5551928c9baf4dfd046e8f292ae8b6a6105f5d5ae75c45235c75eb929f02ab7712c5adf1a068a046db38700
- SSDEEP 384:tZyKGNUst+3gUy6jjhK6qEs1tJqzQIij+ZsNO3PlpJKkkjh/TzF7pWnbmgreT0pe:HSwQh6/h1u14uXQ/omC+L
- TLSH T15713D78DB694E174D5FF8BF1B4A2B2890B71A017A802930F99F154D94FB3EC09611EE7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10