General
- Target Payload.exe
- Size 59KB
- Sample260820-rrls3sstbv
- SHA256 1f4bc87d1ab59d68b9789e497ab88a750bd0946e68ff7039836db4cd9e5ba38e
- MD5 dcc91ef0ea93bf7e7df36eb79d8e29bd
- SHA1 9b9954bdc732c6b3bed88066336064d2368d7100
- SHA512 d1db0d441fd825fe2e13bade67bc2f397f34c4fa5431f75abdb80948c430af8edfa604c22ca0125476da76d832efa002cfe4f8e2f7fa51be5a5b3d70eb5cb916
- SSDEEP 1536:Mq3dS4ITPW83C6hRdswl0DhXaxI3pmNOe:MkU4ITDS6bdNl0DhXaxI3pmM
- TLSH T114431A0E7BD54944E6BD4BBB84F640120778EC436622FA1E4AD6E45A3B337D98E04BB1
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Payload.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
<- NjRAT 0.7d Horror Edition ->
Botnet
-
HELLO
C2
-
john12dqr23-37470.portmap.host:6060
Mutex
-
0b10454cc801fdef844db29c3dc69421
Attributes
-
reg_key
0b10454cc801fdef844db29c3dc69421
-
splitter
Y262SUCZ4UJJ
Targets
-
- Target Payload.exe
- Size 59KB
- SHA256 1f4bc87d1ab59d68b9789e497ab88a750bd0946e68ff7039836db4cd9e5ba38e
- MD5 dcc91ef0ea93bf7e7df36eb79d8e29bd
- SHA1 9b9954bdc732c6b3bed88066336064d2368d7100
- SHA512 d1db0d441fd825fe2e13bade67bc2f397f34c4fa5431f75abdb80948c430af8edfa604c22ca0125476da76d832efa002cfe4f8e2f7fa51be5a5b3d70eb5cb916
- SSDEEP 1536:Mq3dS4ITPW83C6hRdswl0DhXaxI3pmNOe:MkU4ITDS6bdNl0DhXaxI3pmM
- TLSH T114431A0E7BD54944E6BD4BBB84F640120778EC436622FA1E4AD6E45A3B337D98E04BB1
- MD5 SHA1 SHA512 SSDEEP TLSH