General
- Target ElrH2BYH NjRAT privet editon.exe
- Size 15.6MB
- Sample260821-rd99hsfn8v
- SHA256 738f9d6d6d707da73c9fac42f6f025479cc1791b78a5573ab7ac2be5f52a14e2
- MD5 568c341d65c8de78e4a1a018bf576fa8
- SHA1 8d32fa7f2c2f2945cfe50a742ffc0778a7def61f
- SHA512 b085ea9473e8d8683c199f1861c7779fca1685429ecad796077aa4ef3ffab140afa89fb2c461d6a9686a00a6578ff6e657c891b7f0daafbde74071502ff896b4
- SSDEEP 196608:NJeKr2kYvaKqgAyoSxX3NYeOu2kYJBnnim//7uVtFZ03MtV0Poiv5mp:RHZgA+9ecWBnnim//7w03M4Fv5mp
- TLSH T1D9F6BE02B291D911E07E56F4D6E28BF606B1BD0EE935827725903F29BDF27C26D027C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ElrH2BYH NjRAT privet editon.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target ElrH2BYH NjRAT privet editon.exe
- Size 15.6MB
- SHA256 738f9d6d6d707da73c9fac42f6f025479cc1791b78a5573ab7ac2be5f52a14e2
- MD5 568c341d65c8de78e4a1a018bf576fa8
- SHA1 8d32fa7f2c2f2945cfe50a742ffc0778a7def61f
- SHA512 b085ea9473e8d8683c199f1861c7779fca1685429ecad796077aa4ef3ffab140afa89fb2c461d6a9686a00a6578ff6e657c891b7f0daafbde74071502ff896b4
- SSDEEP 196608:NJeKr2kYvaKqgAyoSxX3NYeOu2kYJBnnim//7uVtFZ03MtV0Poiv5mp:RHZgA+9ecWBnnim//7w03M4Fv5mp
- TLSH T1D9F6BE02B291D911E07E56F4D6E28BF606B1BD0EE935827725903F29BDF27C26D027C6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory