Overview

overview

10

Static

static

10

اقلك �...ك.exe

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    اقلك شي.zip
  • Size 23KB
  • Sample261111-qvt37ahx2x
  • SHA256 89fe129eff89f01a9f9ce404bd9ba89512d8cf3b52553898fc4360990710b9c2
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
njratvictimdefense_evasiondiscoverypersistenceprivilege_escalationtrojan

Malware Config

Extracted

Family

  • njrat

Version

  • <- NjRAT 0.7d Horror Edition ->

Botnet

  • Victim

C2

  • ffgg-38079.portmap.host:38079

Mutex

  • a4361b564a09c369d442a82be1b604b5

Attributes
  • reg_key

    a4361b564a09c369d442a82be1b604b5

  • splitter

    Y262SUCZ4UJJ

Targets

    • Target
      اقلك شي/احبك.exe
    • Size 54KB
    • SHA256 c58e811cbabf030cd7bf720d9a84e7abf8990f9e5ed0e57af217f29bfaf8b781
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    defense_evasiondiscoverypersistenceprivilege_escalation

    • Creates a file in the Startup directory

      A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.

      persistenceprivilege_escalation
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks