General
- Target Payload.exe
- Size 59KB
- Sample260826-3lbayaxglb
- SHA256 8b49f29aca54c3dc2467ff144f3a82d775527767395dca4d5f673e04cd79851c
- MD5 47f17f85d5ecfb3b2c63110cf90a87e4
- SHA1 d1abedbfa5eb85138d873841bed5e7aa015957f7
- SHA512 ca3b8591bb1c450527503b8baf1fcba668e0f3fb7b481376b6b807100d15832368951576e6a0462f518fb305418f262cd1bab3aeb4472ff3b5bb24331d21ec29
- SSDEEP 1536:jxEL3KxIT28JDhBdewl0DpXaxI3pmaOe:jxEzIITrJDLdfl0DpXaxI3pmB
- TLSH T19C431B0D7BD54944D6BD4BBF84F240120778EC43A222FA1E4AD6A45A3B337D98D44FB1
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Payload.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Payload.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
<- NjRAT 0.7d Horror Edition ->
Botnet
-
HELLO
C2
-
n0a4gtlz3b.localto.net:8284
Mutex
-
1057cb52ef3e77c133baa25f3f530974
Attributes
-
reg_key
1057cb52ef3e77c133baa25f3f530974
-
splitter
Y262SUCZ4UJJ
Targets
-
- Target Payload.exe
- Size 59KB
- SHA256 8b49f29aca54c3dc2467ff144f3a82d775527767395dca4d5f673e04cd79851c
- MD5 47f17f85d5ecfb3b2c63110cf90a87e4
- SHA1 d1abedbfa5eb85138d873841bed5e7aa015957f7
- SHA512 ca3b8591bb1c450527503b8baf1fcba668e0f3fb7b481376b6b807100d15832368951576e6a0462f518fb305418f262cd1bab3aeb4472ff3b5bb24331d21ec29
- SSDEEP 1536:jxEL3KxIT28JDhBdewl0DpXaxI3pmaOe:jxEzIITrJDLdfl0DpXaxI3pmB
- TLSH T19C431B0D7BD54944D6BD4BBF84F240120778EC43A222FA1E4AD6A45A3B337D98D44FB1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10