General
- Target Payload.exe
- Size 55KB
- Sample261016-vbk4dshv8r
- SHA256 af784f198c239c0198981d4a8118c9741c3e748ff7254fc28f567ec74af5d884
- MD5 abca3fa19073db3f560658656048c914
- SHA1 6c492b4aac0b786cdee1e27e6313e4d94169c9aa
- SHA512 1543cc03915795ddec35dfab1a0cf7a626cdfec5af16951166aba644a429c9ee0a8dddab7e98c5cb3986eaa17db2e3528c071b00af75123c0467910d39ce9d16
- SSDEEP 1536:aOv4Dnpe/NoTcwiDESPD1wsNMDIXExI3pmyYm:R4Dn8ymDRPD1wsNMDIXExI3pm
- TLSH T18A432844BFEA4A01E2BC8F3469F645150A34BA63E932EB1F48D568DB53327C58C40FE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Payload.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
<- NjRAT 0.7d Horror Edition ->
Botnet
-
1
C2
-
mrjockjack55432-31879.portmap.host:31879
Mutex
-
b6c1dfc97106491e69c8ffce2792b312
Attributes
-
reg_key
b6c1dfc97106491e69c8ffce2792b312
-
splitter
Y262SUCZ4UJJ
Targets
-
- Target Payload.exe
- Size 55KB
- SHA256 af784f198c239c0198981d4a8118c9741c3e748ff7254fc28f567ec74af5d884
- MD5 abca3fa19073db3f560658656048c914
- SHA1 6c492b4aac0b786cdee1e27e6313e4d94169c9aa
- SHA512 1543cc03915795ddec35dfab1a0cf7a626cdfec5af16951166aba644a429c9ee0a8dddab7e98c5cb3986eaa17db2e3528c071b00af75123c0467910d39ce9d16
- SSDEEP 1536:aOv4Dnpe/NoTcwiDESPD1wsNMDIXExI3pmyYm:R4Dn8ymDRPD1wsNMDIXExI3pm
- TLSH T18A432844BFEA4A01E2BC8F3469F645150A34BA63E932EB1F48D568DB53327C58C40FE6
- MD5 SHA1 SHA512 SSDEEP TLSH