General
- Target Payload.exe
- Size 59KB
- Sample260808-wve7xseh32
- SHA256 2cf1d48e737a21040c96231c761b639213376560ff49b72f7ecb4d53c88a74c5
- MD5 d52b6e84b174b08bae116b5b3a446d06
- SHA1 35ce48e2144136ff3812c1a347f572e5b6f98ec5
- SHA512 cb2e79b2fde0d74bcc6b294c2e4068c46dedd3a1fbf666999b19e2d570f8d943d8d66568a382d1aff97ecbf4b86b11928a0fdcee4245e144a15441800f704a30
- SSDEEP 1536:YjXbSITnbX38q8hAdKwl0DBlXaxI3pmpOe:YjeIT4q8SdLl0DPXaxI3pmg
- TLSH T1A7431A0D7BD54944D6BE4BBB84F150120778EC43A622FA1E4AD6A45A3B337D9CE08FB1
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Payload.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
<- NjRAT 0.7d Horror Edition ->
Botnet
-
Victim
C2
-
172.26.32.1:2222
Mutex
-
48de21a9c84fb15ff34a6f132528f416
Attributes
-
reg_key
48de21a9c84fb15ff34a6f132528f416
-
splitter
Y262SUCZ4UJJ
Targets
-
- Target Payload.exe
- Size 59KB
- SHA256 2cf1d48e737a21040c96231c761b639213376560ff49b72f7ecb4d53c88a74c5
- MD5 d52b6e84b174b08bae116b5b3a446d06
- SHA1 35ce48e2144136ff3812c1a347f572e5b6f98ec5
- SHA512 cb2e79b2fde0d74bcc6b294c2e4068c46dedd3a1fbf666999b19e2d570f8d943d8d66568a382d1aff97ecbf4b86b11928a0fdcee4245e144a15441800f704a30
- SSDEEP 1536:YjXbSITnbX38q8hAdKwl0DBlXaxI3pmpOe:YjeIT4q8SdLl0DPXaxI3pmg
- TLSH T1A7431A0D7BD54944D6BE4BBB84F150120778EC43A622FA1E4AD6A45A3B337D9CE08FB1
- MD5 SHA1 SHA512 SSDEEP TLSH