General
- Target dasdada.exe
- Size 59KB
- Sample260804-xxa7escn6v
- SHA256 5e435ff6f9a815e14030b0b22c7ef42ad12e9500133886d16cd5046df71389da
- MD5 17b4618f2567eaf4d5df2994c518eb3f
- SHA1 f75dca0f0b64f47c87b648ac33c5e2bc4a284788
- SHA512 d467f999b4ce100900759f49473e0e978233f340167bf5d8d41d86b4c2933f09d6827173e982278c3364a3eef93c4fc285a6ddde7aaf4248a882f69d4b6065ba
- SSDEEP 1536:3K/9NIT1BIF78ny9rZ9dewl0DReXaxI3pmeOe:30zIT3y9vdfl0DReXaxI3pmN
- TLSH T1F5431A0E7BD44944E6BD4BBF84F640120778EC436622FA1D4ED2A45A3B337D98E48BB5
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
dasdada.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
dasdada.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
<- NjRAT 0.7d Horror Edition ->
Botnet
-
Victim
C2
-
sl1111-33125.portmap.host:33125:33125
Mutex
-
70e7f9e7d1318314e81c6667c43f63f4
Attributes
-
reg_key
70e7f9e7d1318314e81c6667c43f63f4
-
splitter
Y262SUCZ4UJJ
Targets
-
- Target dasdada.exe
- Size 59KB
- SHA256 5e435ff6f9a815e14030b0b22c7ef42ad12e9500133886d16cd5046df71389da
- MD5 17b4618f2567eaf4d5df2994c518eb3f
- SHA1 f75dca0f0b64f47c87b648ac33c5e2bc4a284788
- SHA512 d467f999b4ce100900759f49473e0e978233f340167bf5d8d41d86b4c2933f09d6827173e982278c3364a3eef93c4fc285a6ddde7aaf4248a882f69d4b6065ba
- SSDEEP 1536:3K/9NIT1BIF78ny9rZ9dewl0DReXaxI3pmeOe:30zIT3y9vdfl0DReXaxI3pmN
- TLSH T1F5431A0E7BD44944E6BD4BBF84F640120778EC436622FA1D4ED2A45A3B337D98E48BB5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10