General
- Target njRAT%200.7v.zip
- Size 1.4MB
- Sample260711-acp4hsax31
- SHA256 557fbc92e46521215ab6c39e02b4340ef4a2ccdbd56b31ed535a8015bfd8a077
- MD5 616e72e2a17bbe890fe2c71dbe8d9091
- SHA1 21ff3c183f6f8a038be97dc22d51c7d2c69139e8
- SHA512 69000de6fa15afdd3cd13a3b49ec3f8310407dfe86f9677ec1795df248f00f85acf4409e37f82b50ebcdec06666c0184019aea2d6bca11d486906b9a996cbd19
- SSDEEP 24576:EuSj5v3wLzJNGHvnLHYjP1RQkcmnrBCmi9hMqv9JUa36rKT58o:jgxApMnL4jP1RQbOdRI+qcVrK9h
- TLSH T10D65338284264BC6189F5B4625C31437735D5C38967824CB9290EB3F79A6E5FCC8F38B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
njRAT 0.7v/njRAT v0.7d.exe
Resource
win10ltsc2021-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
njRAT 0.7v/stub.ps1
Resource
win10ltsc2021-20260513-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target njRAT 0.7v/njRAT v0.7d.exe
- Size 748KB
- SHA256 84d313ca9e8b0ec6387ffe012c0e786080a54b78a511d6b4c15938f0efdce1f4
- MD5 b6367392e691334e20a0a288200e0e26
- SHA1 0061095e4aa67ac420ba92e50f028ede56e737d6
- SHA512 ffa65523ecbf38761f0dc53fe94fe77b7dd91c3a89df36d36b8750daf75606a94178bc018de91b7cd26af7adfe291d00149d52dfda6a2a926f07e950fdc042b9
- SSDEEP 12288:/1dlZo5yMgICie6RqM/mIRpOfFhYbtU2gErsB03EjlrmR429ZSIDv7G/a+8+:/1dlZo5/jqMAZjE9UjlmFZTG/ah+
- TLSH T106F412A6A58603F9C05101720CB2C77CA766AD456F095B8B63DDFC1BF8339248F6726E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
- Target njRAT 0.7v/stub.il
- Size 228KB
- SHA256 daa4362a762a472f717a480102883382b41dc5c17484f649272c5bdb5142917c
- MD5 2041e64bffccfbc9379235fdf294f188
- SHA1 19c1fd78e8f36493e2a9b1c0e437afc2416586f8
- SHA512 c5d5be4615767483432287d3486e805d6744d45a5eac6445cef87ce1e8475bcdbb521dcd8d1c7918d8d73d6634617842b67290bc4fb734a4ab31dfe7daaaec13
- SSDEEP 6144:AdCb38V4N80EC7PAdpJZrLZ9u4zDdyxGu8VnNQUC:AdCb38V4N80EC7PAdzZrLZ9u4zDdyxGG
- TLSH T1DB34EF2D8228999AD4B2701DBA72CB16F76F12270F716C967CEFD254BF322C54270636
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10