General
- Target Payload.exe
- Size 59KB
- Sample260803-pwffrahe83
- SHA256 4eb9fca1ac0c08bb2eb4d5c47ccd194a0c5038358c43a32a68e2f694c7cf423f
- MD5 984356822f36e64c275bf90aca74c0f9
- SHA1 1c09821b1fbc7e1cddbb207bac5f288e19ad33c4
- SHA512 1eaa0c253a04e807316feda7151c92341569c7c7311bda7e39f7406d5c7a1ca047cf1b7b233b2ac28e96c3012cb9b46a05f69126596d710b2688f826238e02b2
- SSDEEP 1536:yhP1OeITj/fM+0J/d7wl0DUXaxI3pm4BOe:ylEeITj/U+0tdUl0DUXaxI3pmp
- TLSH T1FF431B0E7BD44944E6BD4BBF94F240120778EC43A622FA1E4AD6A45A3B337D98D44BF1
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Payload.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Payload.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
<- NjRAT 0.7d Horror Edition ->
Botnet
-
Victim
C2
-
wqdjqdwpn-58784.portmap.host:58784
Mutex
-
eff81df42484bd3780a437e9f3763421
Attributes
-
reg_key
eff81df42484bd3780a437e9f3763421
-
splitter
Y262SUCZ4UJJ
Targets
-
- Target Payload.exe
- Size 59KB
- SHA256 4eb9fca1ac0c08bb2eb4d5c47ccd194a0c5038358c43a32a68e2f694c7cf423f
- MD5 984356822f36e64c275bf90aca74c0f9
- SHA1 1c09821b1fbc7e1cddbb207bac5f288e19ad33c4
- SHA512 1eaa0c253a04e807316feda7151c92341569c7c7311bda7e39f7406d5c7a1ca047cf1b7b233b2ac28e96c3012cb9b46a05f69126596d710b2688f826238e02b2
- SSDEEP 1536:yhP1OeITj/fM+0J/d7wl0DUXaxI3pm4BOe:ylEeITj/U+0tdUl0DUXaxI3pmp
- TLSH T1FF431B0E7BD44944E6BD4BBF94F240120778EC43A622FA1E4AD6A45A3B337D98D44BF1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10