General
- Target Payload.exe
- Size 54KB
- Sample261023-k3smface73
- SHA256 aa665db712da59e0ee3d4c33605168ecc18b0bd59d0803302b8241b8e9422dc5
- MD5 48b3a2b6b9c9405d8b99fbac67f95b10
- SHA1 eb68afe41f1177f748d94346dff4bf191e3a9ce8
- SHA512 a182072891c20a75104013c1af919897780dddf70f8e9db6c5379dbefb7dc9dc3acd3af716b947bc9f24398c577338c7a02eac20fac503cdb4b797ac2506c6da
- SSDEEP 1536:ZBAA8DnYNe0J5T6DewsNMD+XExI3pmAm:38DnZux6DewsNMD+XExI3pm
- TLSH T1E3431744BFEA4A01E2BD8F7468F555150A34AA23F532EB1F88D668DB17327C58C40FE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Payload.exe
Resource
win11-20260911-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
<- NjRAT 0.7d Horror Edition ->
Botnet
-
Victim
C2
-
1.0.0.721:1093
Mutex
-
ec6d64dbe9f0baf17d3c9a7c284460ce
Attributes
-
reg_key
ec6d64dbe9f0baf17d3c9a7c284460ce
-
splitter
Y262SUCZ4UJJ
Targets
-
- Target Payload.exe
- Size 54KB
- SHA256 aa665db712da59e0ee3d4c33605168ecc18b0bd59d0803302b8241b8e9422dc5
- MD5 48b3a2b6b9c9405d8b99fbac67f95b10
- SHA1 eb68afe41f1177f748d94346dff4bf191e3a9ce8
- SHA512 a182072891c20a75104013c1af919897780dddf70f8e9db6c5379dbefb7dc9dc3acd3af716b947bc9f24398c577338c7a02eac20fac503cdb4b797ac2506c6da
- SSDEEP 1536:ZBAA8DnYNe0J5T6DewsNMD+XExI3pmAm:38DnZux6DewsNMD+XExI3pm
- TLSH T1E3431744BFEA4A01E2BD8F7468F555150A34AA23F532EB1F88D668DB17327C58C40FE6
- MD5 SHA1 SHA512 SSDEEP TLSH