General
- Target 4444444ffffffffffffffffffffffffffff.exe
- Size 55KB
- Sample261004-tl37aabh23
- SHA256 8223de70c8296a1311fd70a7f357c66fbf11ee13da182d5761ec3a3a86792b5c
- MD5 57ac60e47b010d9d75e23b545ab99211
- SHA1 760d3ffd96ffeb37ba19c6b6ae3567caf0efe2d2
- SHA512 155241b59ed6a828cfa541860702a2c737a44322c4695ddd2d0f5a5a1bf8f78a9060069e51f33b94c28c73613503f87d1b0797c9421dfcee7ab424843998af48
- SSDEEP 1536:0FDdIDnrNZtLy9CIDKwsNMDjXExI3pm4m:WZIDnRekIDKwsNMDjXExI3pm
- TLSH T1E3431844BFEA4A05E2BD8F3468F655150A34AA23F532EB1F48D668DB17327C58C40FE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
4444444ffffffffffffffffffffffffffff.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
4444444ffffffffffffffffffffffffffff.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
<- NjRAT 0.7d Horror Edition ->
Botnet
-
vccxcx
C2
-
hb2grktsae.localto.net:7823
Mutex
-
96d398a3356b1268841b0a53b1636fe0
Attributes
-
reg_key
96d398a3356b1268841b0a53b1636fe0
-
splitter
Y262SUCZ4UJJ
Targets
-
- Target 4444444ffffffffffffffffffffffffffff.exe
- Size 55KB
- SHA256 8223de70c8296a1311fd70a7f357c66fbf11ee13da182d5761ec3a3a86792b5c
- MD5 57ac60e47b010d9d75e23b545ab99211
- SHA1 760d3ffd96ffeb37ba19c6b6ae3567caf0efe2d2
- SHA512 155241b59ed6a828cfa541860702a2c737a44322c4695ddd2d0f5a5a1bf8f78a9060069e51f33b94c28c73613503f87d1b0797c9421dfcee7ab424843998af48
- SSDEEP 1536:0FDdIDnrNZtLy9CIDKwsNMDjXExI3pm4m:WZIDnRekIDKwsNMDjXExI3pm
- TLSH T1E3431844BFEA4A05E2BD8F3468F655150A34AA23F532EB1F48D668DB17327C58C40FE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10