General
- Target mjnoon.exe
- Size 55KB
- Sample261001-29qvvscf93
- SHA256 655dd7d6de5c21211bd3b77ef4f1452f8ec2c83810b2a7081e9dde324cdeae3d
- MD5 70484ef42e178c9124c2300dcca91562
- SHA1 d67de6e5c206ea5b615b4d57b5175d9a41165a2c
- SHA512 4d9599a6f77515d451271c4861c0bce1e1eac4dbf2e15352d006a23217d80ddb6759e7db5a4bbe29271f0c601241e1b37d4b548e2c51de416d21fb4703b67c5f
- SSDEEP 1536:eDCUbsDnyNho6JypySDqwsNMDwXExI3pm2m:WCEsDn4o6I4SDqwsNMDwXExI3pm
- TLSH T1E6431744BFEA4A05E2BD8F3468F655150634BA63E532EB1E8CD668DB13327C58C40FE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
mjnoon.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
mjnoon.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
<- NjRAT 0.7d Horror Edition ->
Botnet
-
Victim
C2
-
24.tcp.cpolar.top:444
Mutex
-
f602a1b7bbb5e732202a455c30203525
Attributes
-
reg_key
f602a1b7bbb5e732202a455c30203525
-
splitter
Y262SUCZ4UJJ
Targets
-
- Target mjnoon.exe
- Size 55KB
- SHA256 655dd7d6de5c21211bd3b77ef4f1452f8ec2c83810b2a7081e9dde324cdeae3d
- MD5 70484ef42e178c9124c2300dcca91562
- SHA1 d67de6e5c206ea5b615b4d57b5175d9a41165a2c
- SHA512 4d9599a6f77515d451271c4861c0bce1e1eac4dbf2e15352d006a23217d80ddb6759e7db5a4bbe29271f0c601241e1b37d4b548e2c51de416d21fb4703b67c5f
- SSDEEP 1536:eDCUbsDnyNho6JypySDqwsNMDwXExI3pm2m:WCEsDn4o6I4SDqwsNMDwXExI3pm
- TLSH T1E6431744BFEA4A05E2BD8F3468F655150634BA63E532EB1E8CD668DB13327C58C40FE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Adds Run key to start application