General
- Target Payload.exe
- Size 59KB
- Sample260803-ptc8lsbj4y
- SHA256 82568dbb2d7cb3d8d4a2ddc0a1bd1eeefbc72e2ce25639b82e26fe9355f4a977
- MD5 d74376c31a638754c51ef5aa7f50526e
- SHA1 9484d009c618a91245488219b4b9b530571bef6b
- SHA512 71cb221cc37528c24c9084b7a694facc9291883277fb500e3562bd9a47ec5806c98144369835fbd9b1bf5cad9daf0be3aad2f2bc550d7a72f8c29260ae8c1afa
- SSDEEP 1536:nVP1OeITj/fM+0J/d7wl0DUXaxI3pmgOe:nZEeITj/U+0tdUl0DUXaxI3pmv
- TLSH T1EA431B0E7BD44944E6BD4BBF84F240120778EC43A622FA1E4AD6A45A3B337D98D44BF1
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Payload.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
Payload.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
<- NjRAT 0.7d Horror Edition ->
Botnet
-
Victim
C2
-
wqdjqdwpn-58784.portmap.host:58784
Mutex
-
eff81df42484bd3780a437e9f3763421
Attributes
-
reg_key
eff81df42484bd3780a437e9f3763421
-
splitter
Y262SUCZ4UJJ
Targets
-
- Target Payload.exe
- Size 59KB
- SHA256 82568dbb2d7cb3d8d4a2ddc0a1bd1eeefbc72e2ce25639b82e26fe9355f4a977
- MD5 d74376c31a638754c51ef5aa7f50526e
- SHA1 9484d009c618a91245488219b4b9b530571bef6b
- SHA512 71cb221cc37528c24c9084b7a694facc9291883277fb500e3562bd9a47ec5806c98144369835fbd9b1bf5cad9daf0be3aad2f2bc550d7a72f8c29260ae8c1afa
- SSDEEP 1536:nVP1OeITj/fM+0J/d7wl0DUXaxI3pmgOe:nZEeITj/U+0tdUl0DUXaxI3pmv
- TLSH T1EA431B0E7BD44944E6BD4BBF84F240120778EC43A622FA1E4AD6A45A3B337D98D44BF1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10