General
- Target Payload.exe
- Size 59KB
- Sample260820-t6mp2avsaz
- SHA256 09c062c202d2a2975791abf1f198559b6cad204b78617c1a00d6db9fa6ed9fef
- MD5 ebdf30cec5fa89585f8ca64d5eb6b9e5
- SHA1 c86d1a3c5d0c65ae22b8518a72b481a1a831390d
- SHA512 9805fe3c761dfb1a18b0e8bf12df1133a3f70b57771835d3671c1a1733e6c163418b85330b13c74d95af6a1c3062e1aaff91e1dd6b6b0af84c0118bf8446c82f
- SSDEEP 1536:Oq3dS4ITPW83C6hRdmwl0DhXaxI3pmgOe:OkU4ITDS6bd3l0DhXaxI3pmv
- TLSH T104431A0E7BD54944E6BD4BBF84F240120778EC436622FA1E4AD6E45A3B337D98E04BB5
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Payload.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
<- NjRAT 0.7d Horror Edition ->
Botnet
-
Victim
C2
-
loading119-52979.portmap.host:52979
Mutex
-
9fcc89eaa30b9bc3f9206e6ddc04ab22
Attributes
-
reg_key
9fcc89eaa30b9bc3f9206e6ddc04ab22
-
splitter
Y262SUCZ4UJJ
Targets
-
- Target Payload.exe
- Size 59KB
- SHA256 09c062c202d2a2975791abf1f198559b6cad204b78617c1a00d6db9fa6ed9fef
- MD5 ebdf30cec5fa89585f8ca64d5eb6b9e5
- SHA1 c86d1a3c5d0c65ae22b8518a72b481a1a831390d
- SHA512 9805fe3c761dfb1a18b0e8bf12df1133a3f70b57771835d3671c1a1733e6c163418b85330b13c74d95af6a1c3062e1aaff91e1dd6b6b0af84c0118bf8446c82f
- SSDEEP 1536:Oq3dS4ITPW83C6hRdmwl0DhXaxI3pmgOe:OkU4ITDS6bd3l0DhXaxI3pmv
- TLSH T104431A0E7BD54944E6BD4BBF84F240120778EC436622FA1E4AD6E45A3B337D98E04BB5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score4/10