General
- Target Pa123312132312ylo1ad.exe
- Size 55KB
- Sample261016-vhtn4sae73
- SHA256 5dc01538b99544cbcb2a94b8cd33f55265bace64e1723c5f28737ca75d10cec0
- MD5 a5864218315be23004ea4bacae06761f
- SHA1 2b0a877599074b8468b4ac77cdccb6b557fbffb7
- SHA512 4c7ba102489c1ff3971d31279e44503a31298ed758ab6aa49b48872e88537ef184b99dee7c86a25d45103f03eee188870066bb9c64377fea008535ad53c20cd5
- SSDEEP 1536:Eljs4DnAN7jytFADbiwsNMDvXExI3pm6m:iI4DnA2PADbiwsNMDvXExI3pm
- TLSH T187431844BFEA4A01E2BD8F3468F655150634AA63E532EB1F48D668EB17327C58C40FE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
Pa123312132312ylo1ad.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Pa123312132312ylo1ad.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
<- NjRAT 0.7d Horror Edition ->
Botnet
-
1
C2
-
RedBot1-32834.portmap.host:32834
Mutex
-
cdb96a60c122afa1a12d4adb3e1d690f
Attributes
-
reg_key
cdb96a60c122afa1a12d4adb3e1d690f
-
splitter
Y262SUCZ4UJJ
Targets
-
- Target Pa123312132312ylo1ad.exe
- Size 55KB
- SHA256 5dc01538b99544cbcb2a94b8cd33f55265bace64e1723c5f28737ca75d10cec0
- MD5 a5864218315be23004ea4bacae06761f
- SHA1 2b0a877599074b8468b4ac77cdccb6b557fbffb7
- SHA512 4c7ba102489c1ff3971d31279e44503a31298ed758ab6aa49b48872e88537ef184b99dee7c86a25d45103f03eee188870066bb9c64377fea008535ad53c20cd5
- SSDEEP 1536:Eljs4DnAN7jytFADbiwsNMDvXExI3pm6m:iI4DnA2PADbiwsNMDvXExI3pm
- TLSH T187431844BFEA4A01E2BD8F3468F655150634AA63E532EB1F48D668EB17327C58C40FE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10