General
- Target Stealseries.gg.exe
- Size 55KB
- Sample260909-vnfpfaycpe
- SHA256 749124cadce7642461bd7d56b298bd00abe9e74569b34e4b67cd3d00cea5c89d
- MD5 f4473302d924eab7c5f6222442495c9b
- SHA1 6c99ad77b6c585a776452a0a4a9861044ededf18
- SHA512 ff9e454667e40f65032fcb22b1fde057ae5acfeb99917180a7f7413fd6a4f5c58c5c44bd9146433cd540682f0d94a21ebc198315ecb8d38b0a17315bc6b6e1eb
- SSDEEP 1536:wkZMDnE4uNhty4X+SChD8wsNMDBXExI3pmKm:XMDnlIk4XohD8wsNMDBXExI3pm
- TLSH T1E9432744BFEA4A01E2BD8F3468F655150634BA63E532EB1F48D668DB17327C58C80FE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Stealseries.gg.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
Stealseries.gg.exe
Resource
win10ltsc2021-20260513-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
<- NjRAT 0.7d Horror Edition ->
Botnet
-
Victim
C2
-
28.tcp.cpolar.top:11130
Mutex
-
14c6bb6779d3ee61797dd62e2b77c752
Attributes
-
reg_key
14c6bb6779d3ee61797dd62e2b77c752
-
splitter
Y262SUCZ4UJJ
Targets
-
- Target Stealseries.gg.exe
- Size 55KB
- SHA256 749124cadce7642461bd7d56b298bd00abe9e74569b34e4b67cd3d00cea5c89d
- MD5 f4473302d924eab7c5f6222442495c9b
- SHA1 6c99ad77b6c585a776452a0a4a9861044ededf18
- SHA512 ff9e454667e40f65032fcb22b1fde057ae5acfeb99917180a7f7413fd6a4f5c58c5c44bd9146433cd540682f0d94a21ebc198315ecb8d38b0a17315bc6b6e1eb
- SSDEEP 1536:wkZMDnE4uNhty4X+SChD8wsNMDBXExI3pmKm:XMDnlIk4XohD8wsNMDBXExI3pm
- TLSH T1E9432744BFEA4A01E2BD8F3468F655150634BA63E532EB1F48D668DB17327C58C80FE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10