General
- Target Payload.exe
- Size 59KB
- Sample260803-pvm47sy1es
- SHA256 a5421bdc7fea995a6da516200d27b8fd611368cb058fb875613880cfedb025ed
- MD5 ca00f34659a4beb56b203f05b2f18647
- SHA1 cc9d0fcb95ec979680bfcbdfdd04cfb957a160b2
- SHA512 ee21e7561f7e3e00fe0b9e943f4c01cbc47c4f16e90e092bad4488ad3a22a53e5ed87a8d020881ec2746229bf2bc22dffafe53140049360e133e6851f97efa87
- SSDEEP 1536:L2P1OeITj/fM+0J/d7wl0DUXaxI3pmzOe:LIEeITj/U+0tdUl0DUXaxI3pmy
- TLSH T1E1431B0E7BD44944E6BD4BBF94F240120778EC43A622FA1E4AD6A45A3B337D98D44BF1
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Payload.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Payload.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
<- NjRAT 0.7d Horror Edition ->
Botnet
-
Victim
C2
-
wqdjqdwpn-58784.portmap.host:58784
Mutex
-
eff81df42484bd3780a437e9f3763421
Attributes
-
reg_key
eff81df42484bd3780a437e9f3763421
-
splitter
Y262SUCZ4UJJ
Targets
-
- Target Payload.exe
- Size 59KB
- SHA256 a5421bdc7fea995a6da516200d27b8fd611368cb058fb875613880cfedb025ed
- MD5 ca00f34659a4beb56b203f05b2f18647
- SHA1 cc9d0fcb95ec979680bfcbdfdd04cfb957a160b2
- SHA512 ee21e7561f7e3e00fe0b9e943f4c01cbc47c4f16e90e092bad4488ad3a22a53e5ed87a8d020881ec2746229bf2bc22dffafe53140049360e133e6851f97efa87
- SSDEEP 1536:L2P1OeITj/fM+0J/d7wl0DUXaxI3pmzOe:LIEeITj/U+0tdUl0DUXaxI3pmy
- TLSH T1E1431B0E7BD44944E6BD4BBF94F240120778EC43A622FA1E4AD6A45A3B337D98D44BF1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10