General
- Target Payload.exe
- Size 54KB
- Sample260826-qs7aqsxtdv
- SHA256 1bfe2df533657f83f0dcca2a8ee29174ff95ef67f65605614a338e3ba8015c66
- MD5 6ea69626b5cc7b8bc2af08b4560d0bd9
- SHA1 c2b52ad7c62d63bb87e49bdf1c5d9d09d75d70a3
- SHA512 18907d80b36f91776aa436e2549c3508388dd3a0dca5c17a640cd1f783f49d13eb0f0b1a7c48b8c42d1642a58ddd1584c2be3de2ee63c1190c31a83c53ce0174
- SSDEEP 1536:vrBgDnPviNk2dQHMDSwsNMDAXExI3pmkm:tgDnHtc0MDSwsNMDAXExI3pm
- TLSH T1C3431844BFEA5A05E2BD8F3468F645150634BA23E532EB1F48D668EB17327C58C40FE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Payload.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
<- NjRAT 0.7d Horror Edition ->
Botnet
-
Victim
C2
-
1.0.0.721:169
Mutex
-
50c20f4176a545f8205e0fa34a425120
Attributes
-
reg_key
50c20f4176a545f8205e0fa34a425120
-
splitter
Y262SUCZ4UJJ
Targets
-
- Target Payload.exe
- Size 54KB
- SHA256 1bfe2df533657f83f0dcca2a8ee29174ff95ef67f65605614a338e3ba8015c66
- MD5 6ea69626b5cc7b8bc2af08b4560d0bd9
- SHA1 c2b52ad7c62d63bb87e49bdf1c5d9d09d75d70a3
- SHA512 18907d80b36f91776aa436e2549c3508388dd3a0dca5c17a640cd1f783f49d13eb0f0b1a7c48b8c42d1642a58ddd1584c2be3de2ee63c1190c31a83c53ce0174
- SSDEEP 1536:vrBgDnPviNk2dQHMDSwsNMDAXExI3pmkm:tgDnHtc0MDSwsNMDAXExI3pm
- TLSH T1C3431844BFEA5A05E2BD8F3468F645150634BA23E532EB1F48D668EB17327C58C40FE6
- MD5 SHA1 SHA512 SSDEEP TLSH