General
- Target Payload.exe
- Size 55KB
- Sample260821-s1elssca69
- SHA256 e509595dd404196edf8c265b00b438eaaaf1dc5a84fb897ab504ef841ab43e31
- MD5 8ee503fcc012ee6fef831215d01f08bb
- SHA1 7530698544e91082531bd191b038778a00bdd38e
- SHA512 e80c2f1d7f4bc0e8d3d825cd8271edeef003c0f9f64fd7315b1f2e1e3a9ab49320cc01fe77c977951c9336620ac397bb81e70462e0a8c9c2ab2f89dff77f9881
- SSDEEP 1536:jk05MDn5NRgyRhOzDawsNMDTSXExI3pm/m:rMDnBxfOzDawsNMDTSXExI3pm
- TLSH T1E2431844BFEA5A01E2BC8F3468F645150634AA63E532EB1F4CD668EB13327C58C40FE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Payload.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Payload.exe
Resource
win10ltsc2021-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
Payload.exe
Resource
ubuntu1804-amd64-20260513-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
<- NjRAT 0.7d Horror Edition ->
Botnet
-
Victim
C2
-
62.171.161.182:20019
Mutex
-
0b383f0f28f06fd8b44998788051b39b
Attributes
-
reg_key
0b383f0f28f06fd8b44998788051b39b
-
splitter
Y262SUCZ4UJJ
Targets
-
- Target Payload.exe
- Size 55KB
- SHA256 e509595dd404196edf8c265b00b438eaaaf1dc5a84fb897ab504ef841ab43e31
- MD5 8ee503fcc012ee6fef831215d01f08bb
- SHA1 7530698544e91082531bd191b038778a00bdd38e
- SHA512 e80c2f1d7f4bc0e8d3d825cd8271edeef003c0f9f64fd7315b1f2e1e3a9ab49320cc01fe77c977951c9336620ac397bb81e70462e0a8c9c2ab2f89dff77f9881
- SSDEEP 1536:jk05MDn5NRgyRhOzDawsNMDTSXExI3pm/m:rMDnBxfOzDawsNMDTSXExI3pm
- TLSH T1E2431844BFEA5A01E2BC8F3468F645150634AA63E532EB1F4CD668EB13327C58C40FE6
- MD5 SHA1 SHA512 SSDEEP TLSH