General
- Target Payloa22d.exe
- Size 55KB
- Sample260829-l2jtkshj5t
- SHA256 79df259799987c6dcb4a262fe789a2ad14b9d6add6ddf471de02370e6df50d2e
- MD5 56319773362c81b5613f22bc296e8163
- SHA1 b898aaf23470fe5ca321b11029e984036c40a364
- SHA512 84eb5df8430f4faa4235e15f1a347f2137da89ced46ae7c78ffba7bacc598297a68228a7535061610408bc59b69f16a1f99d8548195660a132188e092f9a6538
- SSDEEP 1536:nZOADn6cpNPmSpVcDGiwsNMD4XExI3pmqm:oADn6cPzLcDGiwsNMD4XExI3pm
- TLSH T120431744BFEA4A01E2BD8F7468F645150A34BA23F532EB1E48D568DB17327C58C80FE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Payloa22d.exe
Resource
win10v2004-20260513-en
3 signatures
30 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
<- NjRAT 0.7d Horror Edition ->
Botnet
-
Victim
C2
-
6.tcp.cpolar.cn:11876
Mutex
-
16d8815a29d8ef87d85f97debecc95c6
Attributes
-
reg_key
16d8815a29d8ef87d85f97debecc95c6
-
splitter
Y262SUCZ4UJJ
Targets
-
- Target Payloa22d.exe
- Size 55KB
- SHA256 79df259799987c6dcb4a262fe789a2ad14b9d6add6ddf471de02370e6df50d2e
- MD5 56319773362c81b5613f22bc296e8163
- SHA1 b898aaf23470fe5ca321b11029e984036c40a364
- SHA512 84eb5df8430f4faa4235e15f1a347f2137da89ced46ae7c78ffba7bacc598297a68228a7535061610408bc59b69f16a1f99d8548195660a132188e092f9a6538
- SSDEEP 1536:nZOADn6cpNPmSpVcDGiwsNMD4XExI3pmqm:oADn6cPzLcDGiwsNMD4XExI3pm
- TLSH T120431744BFEA4A01E2BD8F7468F645150A34BA23F532EB1E48D568DB17327C58C80FE6
- MD5 SHA1 SHA512 SSDEEP TLSH