General
- Target Payload.exe
- Size 55KB
- Sample260828-j2ll3avflg
- SHA256 83cf29f93e3c61c065615899e1db6c3a128c3e04952fd668c594a09eac99ff86
- MD5 5662b393381ef30fa3d61c4df558c396
- SHA1 dc4019f8baafc38be9b7a2d29c8ed875bba5bde7
- SHA512 c3f0b0bbbb8eaacb5e260c8416ee34dd4470ac724cae6db3b8a403f30a358af94c7edd8c96a77b16b35f20b905159c4e824db01002ad1d97c8f0843b24d6899c
- SSDEEP 1536:qkCUbsDnyNho6Jyn/GDSwsNMDOXExI3pmlm:dCEsDn4o6I/GDSwsNMDOXExI3pm
- TLSH T1C8431744BFEA4A05E2BD8F3468F655150634AA63F532EB1E8CD668DB13327C58C40FE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Payload.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
<- NjRAT 0.7d Horror Edition ->
Botnet
-
Victim
C2
-
21.tcp.cpolar.top:13379
Mutex
-
ed7926b34386710bb60d5a59636f83a6
Attributes
-
reg_key
ed7926b34386710bb60d5a59636f83a6
-
splitter
Y262SUCZ4UJJ
Targets
-
- Target Payload.exe
- Size 55KB
- SHA256 83cf29f93e3c61c065615899e1db6c3a128c3e04952fd668c594a09eac99ff86
- MD5 5662b393381ef30fa3d61c4df558c396
- SHA1 dc4019f8baafc38be9b7a2d29c8ed875bba5bde7
- SHA512 c3f0b0bbbb8eaacb5e260c8416ee34dd4470ac724cae6db3b8a403f30a358af94c7edd8c96a77b16b35f20b905159c4e824db01002ad1d97c8f0843b24d6899c
- SSDEEP 1536:qkCUbsDnyNho6Jyn/GDSwsNMDOXExI3pmlm:dCEsDn4o6I/GDSwsNMDOXExI3pm
- TLSH T1C8431744BFEA4A05E2BD8F3468F655150634AA63F532EB1E8CD668DB13327C58C40FE6
- MD5 SHA1 SHA512 SSDEEP TLSH