General
- Target Payload.exe
- Size 55KB
- Sample260923-rgrxcatfma
- SHA256 d16d98d306c758a8071cc963454db80e82de774d158f154c492e935c64c94d72
- MD5 61963a055650995a828ad47dc71c7398
- SHA1 f3223f2fb7958fc1fe69b62c67f8de813a4fb9b4
- SHA512 6c8f2b77066af637d275a1f9b51bd02c76440ddc328ac6669822edefd1d5c61044aa1578c4c32c4f05b52adc07b299db14bef50ee5b7ae55b68275ca2987249f
- SSDEEP 1536:kFbsDntNy7sS5ZCD1wsNMDpXExI3pmfm:ksDnm7V/CD1wsNMDpXExI3pm
- TLSH T17E431744BFEA4A05E2BC8F3468F655150A34AA63E932EB1F4CD568DB17327C58C40FE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Payload.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
<- NjRAT 0.7d Horror Edition ->
Botnet
-
1
C2
-
l9n2ofozxv.localto.net:5202
Mutex
-
3997a8019428add64bf4a2f4729dae8c
Attributes
-
reg_key
3997a8019428add64bf4a2f4729dae8c
-
splitter
Y262SUCZ4UJJ
Targets
-
- Target Payload.exe
- Size 55KB
- SHA256 d16d98d306c758a8071cc963454db80e82de774d158f154c492e935c64c94d72
- MD5 61963a055650995a828ad47dc71c7398
- SHA1 f3223f2fb7958fc1fe69b62c67f8de813a4fb9b4
- SHA512 6c8f2b77066af637d275a1f9b51bd02c76440ddc328ac6669822edefd1d5c61044aa1578c4c32c4f05b52adc07b299db14bef50ee5b7ae55b68275ca2987249f
- SSDEEP 1536:kFbsDntNy7sS5ZCD1wsNMDpXExI3pmfm:ksDnm7V/CD1wsNMDpXExI3pm
- TLSH T17E431744BFEA4A05E2BC8F3468F655150A34AA63E932EB1F4CD568DB17327C58C40FE6
- MD5 SHA1 SHA512 SSDEEP TLSH