General
- Target x.exe
- Size 298KB
- Sample261013-wpjyxsce86
- SHA256 19fb17a4349633cfee3c14fc34ae5f8a002a83bd5d55885e612eaf844d6ba781
- MD5 564829feea0c05f4861b3af7898dde80
- SHA1 03a4e5cdae2509b7017a8c796f0db03c31fe582e
- SHA512 b8634e3f3c4ca2fd9d816a1a1f867288805328d7454f2758dbc66d3c3211264ba3c4f89377b9c3bcbd45ed3c03da86d41b2a0a1db7a1b42146c9456e52939602
- SSDEEP 3072:ZQlHv+pAPAK9Bifpn4cPW31cZZPAZlhPhv8xBKpLZP3FpwdnLQGWCkkuxyh0Wmkj:AHvOKHi1XWgAvwxQpRFaxtruQz
- TLSH T1E754519038A27570E55E457A43F76928A2E371223EB3691F44FBF9FC0E211B059D2A37
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
x.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
x.exe
Resource
win11ltsc2024-20260911-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
<- NjRAT 0.7d Horror Edition ->
Botnet
-
Victim
C2
-
32.tcp.vip.cpolar.cn:11335
Mutex
-
a255c90759cfb3b55afb5e4a77f17aba
Attributes
-
reg_key
a255c90759cfb3b55afb5e4a77f17aba
-
splitter
Y262SUCZ4UJJ
Targets
-
- Target x.exe
- Size 298KB
- SHA256 19fb17a4349633cfee3c14fc34ae5f8a002a83bd5d55885e612eaf844d6ba781
- MD5 564829feea0c05f4861b3af7898dde80
- SHA1 03a4e5cdae2509b7017a8c796f0db03c31fe582e
- SHA512 b8634e3f3c4ca2fd9d816a1a1f867288805328d7454f2758dbc66d3c3211264ba3c4f89377b9c3bcbd45ed3c03da86d41b2a0a1db7a1b42146c9456e52939602
- SSDEEP 3072:ZQlHv+pAPAK9Bifpn4cPW31cZZPAZlhPhv8xBKpLZP3FpwdnLQGWCkkuxyh0Wmkj:AHvOKHi1XWgAvwxQpRFaxtruQz
- TLSH T1E754519038A27570E55E457A43F76928A2E371223EB3691F44FBF9FC0E211B059D2A37
- MD5 SHA1 SHA512 SSDEEP TLSH