General
- Target 260802-m7hn5s1fph_pw_infected.zip
- Size 17KB
- Sample260802-rap46sthqa
- SHA256 22080da23f8a7e80c8a67bf14417f430bbffa34d99d85839839c19f468610a9d
- MD5 42085794063bbafecf4fd43620d3d0cf
- SHA1 e5e73ae4a17d37ab7f21e81ee28e1a02a13ea731
- SHA512 57bdc9c13a12cc6eba86d085fbd4d56ad1a5538b8f86bf499cfc7e3ef469c0d557b6f3bd56e32e205eebe8dfa695ffe97c806d54a534fb2d1a70a5c4aff59f4c
- SSDEEP 384:YWlA4zNVCxb/GaPhCv+/YYf1NaW/AaqwWMnWMHn5Cy8:vu4zNVwrGaPhCm/YY+0vCMpH56
- TLSH T10A82C008017D361A8B1593903E1D3CA755AA0810F8FBEC1B9CAE69467F01F5F4AAA74F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
stub.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
stub.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
im523
Botnet
-
SOFT
C2
-
45.84.227.157:5012
Mutex
-
0ec846a435bf91138081ad39491b85bb
Attributes
-
reg_key
0ec846a435bf91138081ad39491b85bb
-
splitter
|'|'|
Targets
-
- Target stub.exe
- Size 37KB
- SHA256 02d38f82c46f5d68f975f4565f099bd8224271717f767a7445b4a857f461e00c
- MD5 d7f8c725d967cd79e3c805749d367545
- SHA1 c18026511b0fb6111199e4ee719b67f9135d4d98
- SHA512 6c1123b135463783f61735fe66214b8e6851109f2b34e461068360aaa21590f7fc2909678b411cddce279d703793fdd864356bfd978dce7f7fffe005ab286d00
- SSDEEP 768:RcbC4H06GVbFtyGeGnRTm+L2umMZSpphn:RewlGrcRTm+YMcd
- TLSH T10503178DBBF18220D1FD6A7B0671E1514376F11B4A23EB0F4EE094BA27B77918B10D91
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10