Analysis
- max time kernel
148s - max time network
123s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
03/05/2026, 01:05
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
NjRat0.7DGoldenEdition-Rus.exe
Resource
win10v2004-20260130-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
NjRat0.7DGoldenEdition-Rus.exe
Resource
win11-20260130-en
2 signatures
150 seconds
General
- Target NjRat0.7DGoldenEdition-Rus.exe
- Size 1.9MB
- Sample260503-bf1vvsdz2k
- SHA256 c81d701c3a4d6b7bcaa40f9c92a1bcfdf2f829954cf1ca15556712fbdc792834
- MD5 8d540934a359a0480de188a748b3d573
- SHA1 556693330454d09e461b0cc16c2c8f69f7f3cd45
- SHA512 d2214389578a2928cc51b7fb098dd8d1ed4677f97a3f6bb18ec5494a3247866c400af7fe5d1a326cd25faf6090139849d3ef0fbb43c62075e5a436c0599d47b9
- SSDEEP 24576:S69t3fGD4IC7VS2s5G8xQ63UJzyS6P/qY7/:S6T3vs5txQ63OqP/P7
- TLSH T138950F03B302EE55E9B832F450058FA052697E4E9174C6B62A743A78E9F98D3FD913CD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4328 NjRat0.7DGoldenEdition-Rus.exe - Suspicious use of SendNotifyMessage 1 IoCs
pid Process 4328 NjRat0.7DGoldenEdition-Rus.exe