General
- Target Payload1test.exe
- Size 55KB
- Sample260913-wh2v6a1cpg
- SHA256 1740554e443360b4a732c19a1daef1a5c52191bfef54cc4e2a84f46579a87ecf
- MD5 9fc092f037b078b6e3a70914f487a3a6
- SHA1 5bc6686d1774139ffe20e1dc29d588b0f7317e18
- SHA512 80d08841f4a4c47c2a074b17cbd417886fd3894866b885eea926eaeb9a529bdf781800f908a1b5071eeb97b395603cf54a2aa3b3ab76fe7ba31df7da8732a62b
- SSDEEP 1536:4Wv4Dnpe/NoTcwiDESPDJwsNMD4XExI3pm0m:v4Dn8ymDRPDJwsNMD4XExI3pm
- TLSH T15D432844BFEA4A01E2BD8F3469F655150A34BA63E932EB1F48D168DB53326C58C40FE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Payload1test.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
<- NjRAT 0.7d Horror Edition ->
Botnet
-
Victim
C2
-
IRAQe7-61844.portmap.host:60000
Mutex
-
8c03a4552b54963a77706893cdb33922
Attributes
-
reg_key
8c03a4552b54963a77706893cdb33922
-
splitter
Y262SUCZ4UJJ
Targets
-
- Target Payload1test.exe
- Size 55KB
- SHA256 1740554e443360b4a732c19a1daef1a5c52191bfef54cc4e2a84f46579a87ecf
- MD5 9fc092f037b078b6e3a70914f487a3a6
- SHA1 5bc6686d1774139ffe20e1dc29d588b0f7317e18
- SHA512 80d08841f4a4c47c2a074b17cbd417886fd3894866b885eea926eaeb9a529bdf781800f908a1b5071eeb97b395603cf54a2aa3b3ab76fe7ba31df7da8732a62b
- SSDEEP 1536:4Wv4Dnpe/NoTcwiDESPDJwsNMD4XExI3pm0m:v4Dn8ymDRPDJwsNMD4XExI3pm
- TLSH T15D432844BFEA4A01E2BD8F3469F655150A34BA63E932EB1F48D168DB53326C58C40FE6
- MD5 SHA1 SHA512 SSDEEP TLSH