General
- Target Paysload.exe
- Size 55KB
- Sample260709-bk5plscs5w
- SHA256 fa9b339457ea45982ff7e01f030ef1f11b04399ff2c27a5bafb7dccc2367d2ef
- MD5 66b75e198e0c49605020b45658cfbeb7
- SHA1 40631295a47c95a0753a0a332351ef19fc5b3bfd
- SHA512 c17106307fabeeb346099fc91d9b548eec691dc758e74f8f7b9e0bd6a3e5a80222981b8d356814a26e3137d6895bd1caf4e11e9403140da747ec27d0944f5f41
- SSDEEP 1536:y2W4DnANrjyHRADRwsNMD0FXExI3pmAm:Y4DnQ2xADRwsNMDWXExI3pm
- TLSH T1BB432844BFEA4A01E2BD8F3469F655150674BA23E532EB1F48D668EB13327C58C40FE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
Paysload.exe
Resource
win11ltsc2024-20260706-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
<- NjRAT 0.7d Horror Edition ->
Botnet
-
Victim
C2
-
portbuddy.dev:3838
Mutex
-
5ef572dc66c1f08cef8d63f8ddda7cf1
Attributes
-
reg_key
5ef572dc66c1f08cef8d63f8ddda7cf1
-
splitter
Y262SUCZ4UJJ
Targets
-
- Target Paysload.exe
- Size 55KB
- SHA256 fa9b339457ea45982ff7e01f030ef1f11b04399ff2c27a5bafb7dccc2367d2ef
- MD5 66b75e198e0c49605020b45658cfbeb7
- SHA1 40631295a47c95a0753a0a332351ef19fc5b3bfd
- SHA512 c17106307fabeeb346099fc91d9b548eec691dc758e74f8f7b9e0bd6a3e5a80222981b8d356814a26e3137d6895bd1caf4e11e9403140da747ec27d0944f5f41
- SSDEEP 1536:y2W4DnANrjyHRADRwsNMD0FXExI3pmAm:Y4DnQ2xADRwsNMDWXExI3pm
- TLSH T1BB432844BFEA4A01E2BD8F3469F655150674BA23E532EB1F48D668EB13327C58C40FE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10