General
- Target Payload.exe
- Size 59KB
- Sample260812-yzv52stgrc
- SHA256 8363b36642bdca5cb9b54cb9a48806347acaa5d7188ed81fee7d09130a504726
- MD5 ea6ee3112bf7454f743db46d9339186d
- SHA1 5cea60ac7beb66d14eddf923efe02efc5d6176eb
- SHA512 2117b63b9b8e650841c1a73002f34619dc847d0f74f25b01da41884bf7607b9627802a419f37e78900b06cc9ec9f6160294dea575ef2d68221b27713cacac23a
- SSDEEP 1536:1eq2WCIT/P8BUBzdNwl0DOXaxI3pmYOe:1gfITcBUpdel0DOXaxI3pm3
- TLSH T1EE430A0D7BD44954E6BD4BBF94F140120778EC43A622FA1E4AE6A45A3B337D98E04BF1
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Payload.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
<- NjRAT 0.7d Horror Edition ->
Botnet
-
Victim
C2
-
lildarkweb.ddns.net:2222
Mutex
-
fbbb7cc8b04301da8caae3d969270319
Attributes
-
reg_key
fbbb7cc8b04301da8caae3d969270319
-
splitter
Y262SUCZ4UJJ
Targets
-
- Target Payload.exe
- Size 59KB
- SHA256 8363b36642bdca5cb9b54cb9a48806347acaa5d7188ed81fee7d09130a504726
- MD5 ea6ee3112bf7454f743db46d9339186d
- SHA1 5cea60ac7beb66d14eddf923efe02efc5d6176eb
- SHA512 2117b63b9b8e650841c1a73002f34619dc847d0f74f25b01da41884bf7607b9627802a419f37e78900b06cc9ec9f6160294dea575ef2d68221b27713cacac23a
- SSDEEP 1536:1eq2WCIT/P8BUBzdNwl0DOXaxI3pmYOe:1gfITcBUpdel0DOXaxI3pm3
- TLSH T1EE430A0D7BD44954E6BD4BBF94F140120778EC43A622FA1E4AE6A45A3B337D98E04BF1
- MD5 SHA1 SHA512 SSDEEP TLSH