General
- Target NJRAT-SOVIET-VERSION-Freemasonry-1999.7z
- Size 1.6MB
- Sample260726-1l7m2a11ev
- SHA256 e2a0caec921602652f2ee6e3a464a1e9f3f781a573c55b73d54fae78382a56b4
- MD5 6131810866dd274e79c7a67cac260bef
- SHA1 92579df15574f5d3f558f7e8124f5a69818ac953
- SHA512 8e53401186d50673a54c347a8e5456e67e6111326f13de46aa620182050c554945e7963b3b461f2ef3ca6dfa3e85bad104a15d2e4543b962796919173f41a506
- SSDEEP 49152:irIyV60n9aGDeYdkIdO3F/R0pmyityjM7tgX:irxVx9aGkQO3FZ0Yt1OX
- TLSH T16685338C738D0F149808C74501BBCC215ED0D2D226A5D456D8F2FAAB7835A8BFA9DDF6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
NJRAT-SOVIET-VERSION-Freemasonry-1999.7z
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
NJRAT-SOVIET-VERSION-Freemasonry-1999.7z
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target NJRAT-SOVIET-VERSION-Freemasonry-1999.7z
- Size 1.6MB
- SHA256 e2a0caec921602652f2ee6e3a464a1e9f3f781a573c55b73d54fae78382a56b4
- MD5 6131810866dd274e79c7a67cac260bef
- SHA1 92579df15574f5d3f558f7e8124f5a69818ac953
- SHA512 8e53401186d50673a54c347a8e5456e67e6111326f13de46aa620182050c554945e7963b3b461f2ef3ca6dfa3e85bad104a15d2e4543b962796919173f41a506
- SSDEEP 49152:irIyV60n9aGDeYdkIdO3F/R0pmyityjM7tgX:irxVx9aGkQO3FZ0Yt1OX
- TLSH T16685338C738D0F149808C74501BBCC215ED0D2D226A5D456D8F2FAAB7835A8BFA9DDF6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Drops desktop.ini file(s)