General
- Target Payload.exe
- Size 55KB
- Sample260816-hvaesasxes
- SHA256 c8ae87ccbbc5e359e399a247c0024124a6a84587ba030193c3236d07a3450a3e
- MD5 bac10f7b071248650b9f6e2f62568d30
- SHA1 e9c27069b886a1d1d570e68af45f75cffe7e2fdb
- SHA512 4c77f69533915392c33417ee253b0183731b7a4303bc32d4624928eafefdec89b78192da06bfff1a156a0e8b374b6e3a4b3253ea27c18478033e5527b2d11812
- SSDEEP 768:rebHFOt1MankGn2NsW6ingB3wkkSN5mwFvfu0YMDHPsSL7XJSxI3pmFm:reZcDn4NsRinqtDAwsNMDZXExI3pmFm
- TLSH T170431744BFEA4A01E2BC8F7468F655150634AA63F532EB1F48D568EB17327C58C80FE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Payload.exe
Resource
win10ltsc2021-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Payload.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
Payload.exe
Resource
win11-20260513-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
<- NjRAT 0.7d Horror Edition ->
Botnet
-
Victim
C2
-
svvvdkjkksjg2-44530.portmap.host:44530
Mutex
-
4f76b37f73a0330de27f30d88dbc3b95
Attributes
-
reg_key
4f76b37f73a0330de27f30d88dbc3b95
-
splitter
Y262SUCZ4UJJ
Targets
-
- Target Payload.exe
- Size 55KB
- SHA256 c8ae87ccbbc5e359e399a247c0024124a6a84587ba030193c3236d07a3450a3e
- MD5 bac10f7b071248650b9f6e2f62568d30
- SHA1 e9c27069b886a1d1d570e68af45f75cffe7e2fdb
- SHA512 4c77f69533915392c33417ee253b0183731b7a4303bc32d4624928eafefdec89b78192da06bfff1a156a0e8b374b6e3a4b3253ea27c18478033e5527b2d11812
- SSDEEP 768:rebHFOt1MankGn2NsW6ingB3wkkSN5mwFvfu0YMDHPsSL7XJSxI3pmFm:reZcDn4NsRinqtDAwsNMDZXExI3pmFm
- TLSH T170431744BFEA4A01E2BC8F7468F655150634AA63F532EB1F48D568EB17327C58C80FE6
- MD5 SHA1 SHA512 SSDEEP TLSH