General
- Target Payload (2).exe
- Size 59KB
- Sample260808-yxh3pstfng
- SHA256 46e9d345a244b8859368e39ea83dae7bd2f6db504372e0f3986e2505cf54171f
- MD5 1bcd29216ad89165683a7e00dec6b2ab
- SHA1 549810f7198787ae43a07e32e9db83dc10a4232f
- SHA512 f6045f8c76376e03a9abd30f1c2745907871c3cd6fbf0678514b193941c4755abb202d0d86677a8029e76783f2247a5834792b193c62f05f0cab4b7b98ca2b83
- SSDEEP 768:qQqTXesn+ht5iTThaPWsBLpoE2rXb/FwwwECl9Z4DYPEbL7XfSxI3pmfOe:1un+LITTJsByxLd1wl0DbXaxI3pmfOe
- TLSH T136431A0D7BD44944D6BD4BBF94F140120778EC43A632FA1E4AD6A49A3B337D98E08BB1
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Payload (2).exe
Resource
ubuntu2204-amd64-20260127-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Payload (2).exe
Resource
debian9-armhf-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
Payload (2).exe
Resource
debian9-mipsbe-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
Payload (2).exe
Resource
debian9-mipsel-20260513-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
<- NjRAT 0.7d Horror Edition ->
Botnet
-
Victim
C2
-
26.tcp.cpolar.top:13676
Mutex
-
097dfe73d59d91117dfc4beb932a131d
Attributes
-
reg_key
097dfe73d59d91117dfc4beb932a131d
-
splitter
Y262SUCZ4UJJ
Targets
-
- Target Payload (2).exe
- Size 59KB
- SHA256 46e9d345a244b8859368e39ea83dae7bd2f6db504372e0f3986e2505cf54171f
- MD5 1bcd29216ad89165683a7e00dec6b2ab
- SHA1 549810f7198787ae43a07e32e9db83dc10a4232f
- SHA512 f6045f8c76376e03a9abd30f1c2745907871c3cd6fbf0678514b193941c4755abb202d0d86677a8029e76783f2247a5834792b193c62f05f0cab4b7b98ca2b83
- SSDEEP 768:qQqTXesn+ht5iTThaPWsBLpoE2rXb/FwwwECl9Z4DYPEbL7XfSxI3pmfOe:1un+LITTJsByxLd1wl0DbXaxI3pmfOe
- TLSH T136431A0D7BD44944D6BD4BBF94F140120778EC43A632FA1E4AD6A49A3B337D98E08BB1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10