General
- Target Payload.exe
- Size 55KB
- Sample260814-e72g9avcqd
- SHA256 0f960d0e9213264d084d01ed36a3617bd077a43aa0c56265f4513bb93822015f
- MD5 758a8ab515d08f150913bb0e3082b64b
- SHA1 c72aa064a77d731013e50861b9474fe7ee1e91b4
- SHA512 2a54a5a2d85e0b8c69f330daf3b3f941cbf50ab256decada0430ef02392435f6b5f65cd2be9d1df7528f4c3fc2247ae28a0feb39624d177b71a6e4195b03b142
- SSDEEP 1536:LWoADn8fLNG/SbrKDDkwsNMDhXExI3pmQm:RADncsqbeDDkwsNMDhXExI3pm
- TLSH T105432845BFEA4A01E2BD8F3468F655150634AA63F932EB1E8CD568DB13327C58C40FE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Payload.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
<- NjRAT 0.7d Horror Edition ->
Botnet
-
Victim
C2
-
sddfgdqw45tj-35300.portmap.host:35300
Mutex
-
2e07f9884d7d4891653ba01a67db1193
Attributes
-
reg_key
2e07f9884d7d4891653ba01a67db1193
-
splitter
Y262SUCZ4UJJ
Targets
-
- Target Payload.exe
- Size 55KB
- SHA256 0f960d0e9213264d084d01ed36a3617bd077a43aa0c56265f4513bb93822015f
- MD5 758a8ab515d08f150913bb0e3082b64b
- SHA1 c72aa064a77d731013e50861b9474fe7ee1e91b4
- SHA512 2a54a5a2d85e0b8c69f330daf3b3f941cbf50ab256decada0430ef02392435f6b5f65cd2be9d1df7528f4c3fc2247ae28a0feb39624d177b71a6e4195b03b142
- SSDEEP 1536:LWoADn8fLNG/SbrKDDkwsNMDhXExI3pmQm:RADncsqbeDDkwsNMDhXExI3pm
- TLSH T105432845BFEA4A01E2BD8F3468F655150634AA63F932EB1E8CD568DB13327C58C40FE6
- MD5 SHA1 SHA512 SSDEEP TLSH