General
- Target Payload.exe
- Size 55KB
- Sample260830-qqkc7atfnd
- SHA256 b8c66ef80930d47094a0d727ef27ea31280b530904c0a58e97a1956308230fb9
- MD5 45826a6f9d18b738f0220cfdf3892579
- SHA1 d77a503d5690e5e424e71161e3cc7cd98bf42d2e
- SHA512 02323e8132c955950b5010e35fbff02b70e4733154a59571773698c2f508638dc13ed090b00cee0c6b4eefa9312515deaddc6ed4a597bdf79ab97b8025d5ed34
- SSDEEP 1536:CmsoDnb4DNQ7SCCHDrwsNMDEXExI3pmim:qoDnEWOrHDrwsNMDEXExI3pm
- TLSH T17B432844BFEA5A01E2BC8F3468F655150A34AA63F532EB1F48D568EB17327C58C40FE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Payload.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
<- NjRAT 0.7d Horror Edition ->
Botnet
-
Victim
C2
-
loading119-52979.portmap.host:52979
Mutex
-
9fcc89eaa30b9bc3f9206e6ddc04ab22
Attributes
-
reg_key
9fcc89eaa30b9bc3f9206e6ddc04ab22
-
splitter
Y262SUCZ4UJJ
Targets
-
- Target Payload.exe
- Size 55KB
- SHA256 b8c66ef80930d47094a0d727ef27ea31280b530904c0a58e97a1956308230fb9
- MD5 45826a6f9d18b738f0220cfdf3892579
- SHA1 d77a503d5690e5e424e71161e3cc7cd98bf42d2e
- SHA512 02323e8132c955950b5010e35fbff02b70e4733154a59571773698c2f508638dc13ed090b00cee0c6b4eefa9312515deaddc6ed4a597bdf79ab97b8025d5ed34
- SSDEEP 1536:CmsoDnb4DNQ7SCCHDrwsNMDEXExI3pmim:qoDnEWOrHDrwsNMDEXExI3pm
- TLSH T17B432844BFEA5A01E2BC8F3468F655150A34AA63F532EB1F48D568EB17327C58C40FE6
- MD5 SHA1 SHA512 SSDEEP TLSH