General
- Target Payload.exe
- Size 59KB
- Sample260804-weg2kstxez
- SHA256 7838c6bf5b76f8fc2194150ecc944eb9a5528b884cb8e17a81a35608133b821c
- MD5 bc83ca0e40eb9d89c79d0bad8d990344
- SHA1 75c331c4e046453b58ee1956d0823fe19be415b0
- SHA512 affaad42f76cd7108f5c0e557db5f3d87ce4dddd7adce59f51db113f379afa619960980beab39a60112c7eaaba22912b205c9855752c7f20e4f9eb753e0324fa
- SSDEEP 1536:cxEZ3KxIT28JDhBdewl0DFXaxI3pmPOe:cxENIITrJDLdfl0DFXaxI3pmG
- TLSH T1DC431B0D7BD54944D6BD0BBF84F240120778EC47A622FA1E4AD6A45A3B337D9CE48BB1
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Payload.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Payload.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
<- NjRAT 0.7d Horror Edition ->
Botnet
-
Victim
C2
-
9foocyvr0i.localto.net:7203
Mutex
-
a2d9d6293874a23afa5455cc98576508
Attributes
-
reg_key
a2d9d6293874a23afa5455cc98576508
-
splitter
Y262SUCZ4UJJ
Targets
-
- Target Payload.exe
- Size 59KB
- SHA256 7838c6bf5b76f8fc2194150ecc944eb9a5528b884cb8e17a81a35608133b821c
- MD5 bc83ca0e40eb9d89c79d0bad8d990344
- SHA1 75c331c4e046453b58ee1956d0823fe19be415b0
- SHA512 affaad42f76cd7108f5c0e557db5f3d87ce4dddd7adce59f51db113f379afa619960980beab39a60112c7eaaba22912b205c9855752c7f20e4f9eb753e0324fa
- SSDEEP 1536:cxEZ3KxIT28JDhBdewl0DFXaxI3pmPOe:cxENIITrJDLdfl0DFXaxI3pmG
- TLSH T1DC431B0D7BD54944D6BD0BBF84F240120778EC47A622FA1E4AD6A45A3B337D9CE48BB1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10