General
- Target Payload.exe
- Size 55KB
- Sample261003-myp2vswhph
- SHA256 0761a9257023c9581af6b38c8f79bc634f39fd56a73325f7a2c09943c3527bfc
- MD5 af5496d6aa9be78e58d1c6c1cd331564
- SHA1 0d50c9e94bdda054ab7262afcc6cc989096d446c
- SHA512 84f452441ce39dd26d609d608f1ad2c8a718c16e06e58721a3c34123b6578ca9443aff2e319b831ac9cdc194263168c901cbf6bf76e86bbdb4370d6c0b1259f2
- SSDEEP 1536:W3ScDnAvNtki5pKD6iwsNMDOXExI3pmWm:JcDnA9vKD6iwsNMDOXExI3pm
- TLSH T1F4432844BFEA4A01E2BD8F3468F645150634BA63E532EB1E4CD668EB17327C58C40FE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
Payload.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Payload.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
<- NjRAT 0.7d Horror Edition ->
Botnet
-
Victim
C2
-
36.tcp.cpolar.top:8080
Mutex
-
77070bfee0e77352546d59309dddb5d7
Attributes
-
reg_key
77070bfee0e77352546d59309dddb5d7
-
splitter
Y262SUCZ4UJJ
Targets
-
- Target Payload.exe
- Size 55KB
- SHA256 0761a9257023c9581af6b38c8f79bc634f39fd56a73325f7a2c09943c3527bfc
- MD5 af5496d6aa9be78e58d1c6c1cd331564
- SHA1 0d50c9e94bdda054ab7262afcc6cc989096d446c
- SHA512 84f452441ce39dd26d609d608f1ad2c8a718c16e06e58721a3c34123b6578ca9443aff2e319b831ac9cdc194263168c901cbf6bf76e86bbdb4370d6c0b1259f2
- SSDEEP 1536:W3ScDnAvNtki5pKD6iwsNMDOXExI3pmWm:JcDnA9vKD6iwsNMDOXExI3pm
- TLSH T1F4432844BFEA4A01E2BD8F3468F645150634BA63E532EB1E4CD668EB17327C58C40FE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10