General
- Target Payload.exe
- Size 59KB
- Sample260808-vhk2zaee34
- SHA256 1bcae0390cf33acc2919f0c424f6fb5f90975eeba6a20d6d451c10f80f5edbbf
- MD5 eb98a43254f7afb4dd2c269f87ff4f66
- SHA1 0dd160be6d9938b23e55d75fd6ff30d34031dad4
- SHA512 188430f526369c6489ea4c04f577dd0b3669cbae3f3ab38606bf3afde8ef3f2c4d1bfc9cbff53e66e1ee78c618dcf75750daf35815536f0ca84d16c9660d440e
- SSDEEP 1536:Feq2WCIT/P8BUBzdNwl0DOXaxI3pmaOe:FgfITcBUpdel0DOXaxI3pmB
- TLSH T1CA431A0D7BD44954E6BD4BBF84F140120778EC43A622FA1E4AE6A45A3B337D98E04BF1
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Payload.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
<- NjRAT 0.7d Horror Edition ->
Botnet
-
Victim
C2
-
lildarkweb.ddns.net:2222
Mutex
-
fbbb7cc8b04301da8caae3d969270319
Attributes
-
reg_key
fbbb7cc8b04301da8caae3d969270319
-
splitter
Y262SUCZ4UJJ
Targets
-
- Target Payload.exe
- Size 59KB
- SHA256 1bcae0390cf33acc2919f0c424f6fb5f90975eeba6a20d6d451c10f80f5edbbf
- MD5 eb98a43254f7afb4dd2c269f87ff4f66
- SHA1 0dd160be6d9938b23e55d75fd6ff30d34031dad4
- SHA512 188430f526369c6489ea4c04f577dd0b3669cbae3f3ab38606bf3afde8ef3f2c4d1bfc9cbff53e66e1ee78c618dcf75750daf35815536f0ca84d16c9660d440e
- SSDEEP 1536:Feq2WCIT/P8BUBzdNwl0DOXaxI3pmaOe:FgfITcBUpdel0DOXaxI3pmB
- TLSH T1CA431A0D7BD44954E6BD4BBF84F140120778EC43A622FA1E4AE6A45A3B337D98E04BF1
- MD5 SHA1 SHA512 SSDEEP TLSH