General
- Target NJRAT-SOVIET-VERSION-Freemasonry-1999.rar
- Size 2.6MB
- Sample260718-nzeg7aav6l
- SHA256 b61d36ed20b91ec6b0d9930379e7442dbe08ae827d810a04ac3686395943ceb4
- MD5 d0ccd6131e4e478fa25c04ee3d1b7541
- SHA1 b9729ef30bc04791135cb705e5fbadd068f120b0
- SHA512 1bf7a02b845e05264c9f04eb37c3542a04f1b4e10a750baeeb1706e1ceeb3c699b754122a460db4fcd1ed5d548dffe5bd15bc077857881b6e93bd7075dd3a45b
- SSDEEP 49152:lbI/d7kJDp/GlBPSkeNHNOvb5brGbLqmXnyR/KO10C+dV77MEuNShG0inm8S:lbQ7kxpuSNOD52TXnyRi8h2VQEuoJine
- TLSH T197C533E32971637E48379DA80B1420664F7A9AC37A3B30B256C5DB7F58627987FC48C1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
NJRAT-SOVIET-VERSION-Freemasonry-1999.rar
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
NJRAT-SOVIET-VERSION-Freemasonry-1999.rar
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target NJRAT-SOVIET-VERSION-Freemasonry-1999.rar
- Size 2.6MB
- SHA256 b61d36ed20b91ec6b0d9930379e7442dbe08ae827d810a04ac3686395943ceb4
- MD5 d0ccd6131e4e478fa25c04ee3d1b7541
- SHA1 b9729ef30bc04791135cb705e5fbadd068f120b0
- SHA512 1bf7a02b845e05264c9f04eb37c3542a04f1b4e10a750baeeb1706e1ceeb3c699b754122a460db4fcd1ed5d548dffe5bd15bc077857881b6e93bd7075dd3a45b
- SSDEEP 49152:lbI/d7kJDp/GlBPSkeNHNOvb5brGbLqmXnyR/KO10C+dV77MEuNShG0inm8S:lbQ7kxpuSNOD52TXnyRi8h2VQEuoJine
- TLSH T197C533E32971637E48379DA80B1420664F7A9AC37A3B30B256C5DB7F58627987FC48C1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Drops desktop.ini file(s)