General
- Target Payload.exe
- Size 59KB
- Sample260809-tkl7da1eqc
- SHA256 5818f0bb0179bb1fbd0bba0a3daddf56f49282a9b7268524219fe4f802111bf9
- MD5 dc1d5b7219f216b278f7a08aba5d2d35
- SHA1 4af2241ebb4ede8d54c867268b09c3430053b014
- SHA512 5699068e02524006184ac39432530a48028b5d49d4fe8832053eb49cb93754adba63744e1b7381f20bb958b4dbcdf4ced6e3156318912890cfffd2f510e03138
- SSDEEP 1536:Peq2WCIT/P8BUBzdNwl0DOXaxI3pmxOe:PgfITcBUpdel0DOXaxI3pmY
- TLSH T166431A0D7BD44954E6BD4BBF84F540120778EC43A622FA1E4AE6A45A3B337D98E04BF1
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Payload.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
<- NjRAT 0.7d Horror Edition ->
Botnet
-
Victim
C2
-
lildarkweb.ddns.net:2222
Mutex
-
fbbb7cc8b04301da8caae3d969270319
Attributes
-
reg_key
fbbb7cc8b04301da8caae3d969270319
-
splitter
Y262SUCZ4UJJ
Targets
-
- Target Payload.exe
- Size 59KB
- SHA256 5818f0bb0179bb1fbd0bba0a3daddf56f49282a9b7268524219fe4f802111bf9
- MD5 dc1d5b7219f216b278f7a08aba5d2d35
- SHA1 4af2241ebb4ede8d54c867268b09c3430053b014
- SHA512 5699068e02524006184ac39432530a48028b5d49d4fe8832053eb49cb93754adba63744e1b7381f20bb958b4dbcdf4ced6e3156318912890cfffd2f510e03138
- SSDEEP 1536:Peq2WCIT/P8BUBzdNwl0DOXaxI3pmxOe:PgfITcBUpdel0DOXaxI3pmY
- TLSH T166431A0D7BD44954E6BD4BBF84F540120778EC43A622FA1E4AE6A45A3B337D98E04BF1
- MD5 SHA1 SHA512 SSDEEP TLSH