General
- Target Payload.exe
- Size 55KB
- Sample260905-cmrffa11by
- SHA256 483b258b61e98e081cc10b306cd4ea8de1b011d09a91e817d8eaeb0b476656db
- MD5 6c9a54739dbde58f300a509346f02a56
- SHA1 1604fd7741ea359f1430f6e7ed5f74ad698a409a
- SHA512 732a9494b138d9939dd0373f0eec2b878bba5a74e430f2f39ad1fa89f474ae581997d1fc81469235429edfd93c580c19ee88db661cd55b283e5a476885b32ddf
- SSDEEP 1536:uyPIDnrNZ9LyDBIDRwsNMDkXExI3pmYm:dIDnhelIDRwsNMDkXExI3pm
- TLSH T13A432944BFEA4A05E2BD8F3468F645150A34AA63E532EB1F4CD668DB17327C58C40FE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Extracted
Family
-
njrat
Version
-
<- NjRAT 0.7d Horror Edition ->
Botnet
-
Victim
C2
-
9.tcp.cpolar.top:13798
Mutex
-
b77f3de86e3c35659a744536b3450f9d
Attributes
-
reg_key
b77f3de86e3c35659a744536b3450f9d
-
splitter
Y262SUCZ4UJJ
Targets
-
- Target Payload.exe
- Size 55KB
- SHA256 483b258b61e98e081cc10b306cd4ea8de1b011d09a91e817d8eaeb0b476656db
- MD5 6c9a54739dbde58f300a509346f02a56
- SHA1 1604fd7741ea359f1430f6e7ed5f74ad698a409a
- SHA512 732a9494b138d9939dd0373f0eec2b878bba5a74e430f2f39ad1fa89f474ae581997d1fc81469235429edfd93c580c19ee88db661cd55b283e5a476885b32ddf
- SSDEEP 1536:uyPIDnrNZ9LyDBIDRwsNMDkXExI3pmYm:dIDnhelIDRwsNMDkXExI3pm
- TLSH T13A432944BFEA4A05E2BD8F3468F645150A34AA63E532EB1F4CD668DB17327C58C40FE6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE