General
- Target Payload.exe
- Size 59KB
- Sample260820-ymd11avaje
- SHA256 6f2914d3800aa8187fd2c5892a73b3914bf9a11e59ffd8bff46287a0c51891b2
- MD5 b61b2cac4107d16dbe6818bc36dcd415
- SHA1 1df54e947d77f3861a517a79e68672514e9fc476
- SHA512 6afbb70066f80e5a956e373478db8cc6913af9633d50394863b0489675457f7ffc567447bcef776ededffb288819c6a8f6059e84c53c84636ca69e969099fda1
- SSDEEP 1536:wh3dS4ITPW83C6hRdvwl0DhXaxI3pmGOe:wVU4ITDS6bdol0DhXaxI3pmF
- TLSH T1D3431A0E7BD54944E6BD4BBB84F240120778EC436622FA1E4AD6E45A3B337D9CE04BB1
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Payload.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Payload.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
<- NjRAT 0.7d Horror Edition ->
Botnet
-
Victim
C2
-
loading119-52979.portmap.host:52979
Mutex
-
9fcc89eaa30b9bc3f9206e6ddc04ab22
Attributes
-
reg_key
9fcc89eaa30b9bc3f9206e6ddc04ab22
-
splitter
Y262SUCZ4UJJ
Targets
-
- Target Payload.exe
- Size 59KB
- SHA256 6f2914d3800aa8187fd2c5892a73b3914bf9a11e59ffd8bff46287a0c51891b2
- MD5 b61b2cac4107d16dbe6818bc36dcd415
- SHA1 1df54e947d77f3861a517a79e68672514e9fc476
- SHA512 6afbb70066f80e5a956e373478db8cc6913af9633d50394863b0489675457f7ffc567447bcef776ededffb288819c6a8f6059e84c53c84636ca69e969099fda1
- SSDEEP 1536:wh3dS4ITPW83C6hRdvwl0DhXaxI3pmGOe:wVU4ITDS6bdol0DhXaxI3pmF
- TLSH T1D3431A0E7BD54944E6BD4BBB84F240120778EC436622FA1E4AD6E45A3B337D9CE04BB1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10