General
- Target DiscordPTB.exe
- Size 55KB
- Sample260922-nt1s8sstex
- SHA256 4d4ae64ec93ce503e31ad963d15812fcc926dbc655512271cb616ff94a4bb78a
- MD5 0dea77fe8d0331a6373fa10f81a6e813
- SHA1 ab08a27e8e867650fd83325339186db2482af9a8
- SHA512 b072fbd2f7f932a88d20deed9582ec1d49e25455e05599340cfbeb39936360aa14aeb4aff4c07e79d59995752104f8337fed526a7af5c84942b059c4e539bcb0
- SSDEEP 768:U0CPl+t1Man0KI2NO5SioJ3Q8kSNCmwFvfu0YMDHPsxL7XJSxI3pmqm:U02sDnXNO5SiKlDfwsNMDAXExI3pmqm
- TLSH T11F432744BFEA4A05E2BD8F3468F659150A34AA63F532EB1F48D568DB13327C58C40FE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
DiscordPTB.exe
Resource
win10v2004-20260911-en
4 signatures
900 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
<- NjRAT 0.7d Horror Edition ->
Botnet
-
dlgeded
C2
-
83agjfmvne.localto.net:8579
Mutex
-
68a66a6da61e02260d88c48153051a60
Attributes
-
reg_key
68a66a6da61e02260d88c48153051a60
-
splitter
Y262SUCZ4UJJ
Targets
-
- Target DiscordPTB.exe
- Size 55KB
- SHA256 4d4ae64ec93ce503e31ad963d15812fcc926dbc655512271cb616ff94a4bb78a
- MD5 0dea77fe8d0331a6373fa10f81a6e813
- SHA1 ab08a27e8e867650fd83325339186db2482af9a8
- SHA512 b072fbd2f7f932a88d20deed9582ec1d49e25455e05599340cfbeb39936360aa14aeb4aff4c07e79d59995752104f8337fed526a7af5c84942b059c4e539bcb0
- SSDEEP 768:U0CPl+t1Man0KI2NO5SioJ3Q8kSNCmwFvfu0YMDHPsxL7XJSxI3pmqm:U02sDnXNO5SiKlDfwsNMDAXExI3pmqm
- TLSH T11F432744BFEA4A05E2BD8F3468F659150A34AA63F532EB1F48D568DB13327C58C40FE6
- MD5 SHA1 SHA512 SSDEEP TLSH