General
- Target Payload.exe
- Size 55KB
- Sample260902-zpcrdsel2y
- SHA256 ce09aa313a079c8d3849f334b449aeb234fdf895d0c78c11b33e5d595c4679e5
- MD5 8bd5ada646d0a92123de03142ab1575e
- SHA1 d3536e9a1a988629b769659f5ca05593db4271c9
- SHA512 4483ecb6312c75dba589373f5231a922d4dbd518492e04fc8a97ba07a8cbd857b98c2dd58edaa451c1b6aa6eb89577475f5dd6acfcca536055bb4de235a91db4
- SSDEEP 1536:x+WNMDncNi9y6iRD3wsNMDbXExI3pmom:nNMDn9ULRD3wsNMDbXExI3pm
- TLSH T11D431744BFEA4A05E2BC8F3468F655150634BA63E532EB1F88D668DB17327C58C40FE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Payload.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
<- NjRAT 0.7d Horror Edition ->
Botnet
-
Victim
C2
-
greggeerggr-34861.portmap.host:34861
Mutex
-
6873bf30ca937be886b26ffd46467601
Attributes
-
reg_key
6873bf30ca937be886b26ffd46467601
-
splitter
Y262SUCZ4UJJ
Targets
-
- Target Payload.exe
- Size 55KB
- SHA256 ce09aa313a079c8d3849f334b449aeb234fdf895d0c78c11b33e5d595c4679e5
- MD5 8bd5ada646d0a92123de03142ab1575e
- SHA1 d3536e9a1a988629b769659f5ca05593db4271c9
- SHA512 4483ecb6312c75dba589373f5231a922d4dbd518492e04fc8a97ba07a8cbd857b98c2dd58edaa451c1b6aa6eb89577475f5dd6acfcca536055bb4de235a91db4
- SSDEEP 1536:x+WNMDncNi9y6iRD3wsNMDbXExI3pmom:nNMDn9ULRD3wsNMDbXExI3pm
- TLSH T11D431744BFEA4A05E2BC8F3468F655150634BA63E532EB1F88D668DB17327C58C40FE6
- MD5 SHA1 SHA512 SSDEEP TLSH