General
- Target Paylo1ad.exe
- Size 55KB
- Sample260814-e889gsvwcz
- SHA256 57b7b4b2427dca4c076671fa7674e3903700288bcb342b65dd8fea5784424b45
- MD5 116f5ef7c86bfe1eedcf5e7c0e6f6653
- SHA1 ee8cc9e186a39bd9fe11e9045c624c7919f6cdea
- SHA512 38fa8f7d11419ac114b5db5d879504e3f727a449c9e94f63ebae6478077ec37a265fb604c4fc5aebe50b78cf7dbe13c9af6304dd454564b2a5c47cc8081243fb
- SSDEEP 1536:Ca/oDnb4DNQ7SCCHDrwsNMDqXExI3pmSm:FoDnEWOrHDrwsNMDqXExI3pm
- TLSH T10B432844BFEA5A01E2BC8F3468F655150A34AA63E532EB1F4CD568EB17327C58C40FE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Paylo1ad.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
<- NjRAT 0.7d Horror Edition ->
Botnet
-
Victim
C2
-
sddfgdqw45tj-35300.portmap.host:505
Mutex
-
c81840fc4d5611b5c6a6931263ca0292
Attributes
-
reg_key
c81840fc4d5611b5c6a6931263ca0292
-
splitter
Y262SUCZ4UJJ
Targets
-
- Target Paylo1ad.exe
- Size 55KB
- SHA256 57b7b4b2427dca4c076671fa7674e3903700288bcb342b65dd8fea5784424b45
- MD5 116f5ef7c86bfe1eedcf5e7c0e6f6653
- SHA1 ee8cc9e186a39bd9fe11e9045c624c7919f6cdea
- SHA512 38fa8f7d11419ac114b5db5d879504e3f727a449c9e94f63ebae6478077ec37a265fb604c4fc5aebe50b78cf7dbe13c9af6304dd454564b2a5c47cc8081243fb
- SSDEEP 1536:Ca/oDnb4DNQ7SCCHDrwsNMDqXExI3pmSm:FoDnEWOrHDrwsNMDqXExI3pm
- TLSH T10B432844BFEA5A01E2BC8F3468F655150A34AA63E532EB1F4CD568EB17327C58C40FE6
- MD5 SHA1 SHA512 SSDEEP TLSH