General
- Target Payfdoad.exe
- Size 55KB
- Sample260825-ab22paz1ex
- SHA256 879579f9d47f20ae043f9b51974be39450a373689e3857199fe70a9c96f5fa96
- MD5 6ef641d5fce92acbe37eb8bcdead9860
- SHA1 ba6b41074212accf6e89f2be95301b58dcf0d245
- SHA512 ea1ec668d92e21945027cec9d4111001323d826917e87cc3073278c3fd69f1aea2004f71d4cefa7e32f926f30b0f5b08b89f8fff71f7daf47269c371afca749c
- SSDEEP 768:jua6lOt1Man8E2N6FikUt34okSNomwFvfu0YMDHPsKL7XJSxI3pmYm:ju1cDnCN6FikSJDNwsNMDxXExI3pmYm
- TLSH T18F431844BFEA5A01E2BD8F3468F555150634BA63F532EB1E48D668DB13327C68C80FE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Payfdoad.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
Payfdoad.exe
Resource
win10ltsc2021-20260513-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
<- NjRAT 0.7d Horror Edition ->
Botnet
-
Victim
C2
-
vkjufce-47440.portmap.host:47440
Mutex
-
8d58359b5ca46b94e3b734077a61e05e
Attributes
-
reg_key
8d58359b5ca46b94e3b734077a61e05e
-
splitter
Y262SUCZ4UJJ
Targets
-
- Target Payfdoad.exe
- Size 55KB
- SHA256 879579f9d47f20ae043f9b51974be39450a373689e3857199fe70a9c96f5fa96
- MD5 6ef641d5fce92acbe37eb8bcdead9860
- SHA1 ba6b41074212accf6e89f2be95301b58dcf0d245
- SHA512 ea1ec668d92e21945027cec9d4111001323d826917e87cc3073278c3fd69f1aea2004f71d4cefa7e32f926f30b0f5b08b89f8fff71f7daf47269c371afca749c
- SSDEEP 768:jua6lOt1Man8E2N6FikUt34okSNomwFvfu0YMDHPsKL7XJSxI3pmYm:ju1cDnCN6FikSJDNwsNMDxXExI3pmYm
- TLSH T18F431844BFEA5A01E2BD8F3468F555150634BA63F532EB1E48D668DB13327C68C80FE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10