General
- Target Payloadbbbb.exe
- Size 55KB
- Sample261015-vb5sssav9m
- SHA256 7e6b044fef7081417cc12797385aa7ac7e2e47d78782fd013e90705fd0f39a21
- MD5 737b2609a71696361bbf297af422363e
- SHA1 9d969bc1df6155f74cfebe88cc6a7c5fe01294b6
- SHA512 74005c8e42adf60934a894422c984b9d427d3a1fdc27e9bd3326d53575cfb85d78a188e1bf8495e957b5881bdcbf64d162c00b8373580da80d71f5727fdb12d8
- SSDEEP 1536:twws4DnAN7jytFADRwsNMDGXExI3pmrm:ST4DnA2PADRwsNMDGXExI3pm
- TLSH T1F7432844BFEA4A05E2BD8F3468F555150634AA23F532EB1F48D668DB13327C58C40FE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Payloadbbbb.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
Payloadbbbb.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
<- NjRAT 0.7d Horror Edition ->
Botnet
-
Victim
C2
-
36.tcp.cpolar.top:10364
Mutex
-
623845d0751bb7c66d17824a8e7a646b
Attributes
-
reg_key
623845d0751bb7c66d17824a8e7a646b
-
splitter
Y262SUCZ4UJJ
Targets
-
- Target Payloadbbbb.exe
- Size 55KB
- SHA256 7e6b044fef7081417cc12797385aa7ac7e2e47d78782fd013e90705fd0f39a21
- MD5 737b2609a71696361bbf297af422363e
- SHA1 9d969bc1df6155f74cfebe88cc6a7c5fe01294b6
- SHA512 74005c8e42adf60934a894422c984b9d427d3a1fdc27e9bd3326d53575cfb85d78a188e1bf8495e957b5881bdcbf64d162c00b8373580da80d71f5727fdb12d8
- SSDEEP 1536:twws4DnAN7jytFADRwsNMDGXExI3pmrm:ST4DnA2PADRwsNMDGXExI3pm
- TLSH T1F7432844BFEA4A05E2BD8F3468F555150634AA23F532EB1F48D668DB13327C58C40FE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10