General
- Target Payload.exe
- Size 59KB
- Sample261024-la4dxattey
- SHA256 0086e36be40bf9603c0af0a5d3fe9802128bacc395193c75d7d52eb15b66c1a4
- MD5 398e2172f1147e5d4f09d48ae1e1fdb0
- SHA1 165f9ded89daa8ecba9c7dab7d616b06da2e866d
- SHA512 570ee7e46908d30a1574249c51bc6d7915d3c3c812c35bacfb5868bea297454e05a247f49bb5ee473bedbb90bce8e5de95a5b98656b96924b99b8d53b707ae51
- SSDEEP 1536:uK/9NIT1BIF78ny9rZ9dewl0D7XaxI3pmnOe:u0zIT3y9vdfl0D7XaxI3pmO
- TLSH T1CC431A0E7BD44944E6BD4BBF84F640120778EC43A622FA1E4ED1A45A3B337D98D48BB5
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Payload.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Payload.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
<- NjRAT 0.7d Horror Edition ->
Botnet
-
1
C2
-
kjxzj-188-70-46-225.run.pinggy-free.link:46099
Mutex
-
c2c12f362c4ca50a693937280d7915e0
Attributes
-
reg_key
c2c12f362c4ca50a693937280d7915e0
-
splitter
Y262SUCZ4UJJ
Targets
-
- Target Payload.exe
- Size 59KB
- SHA256 0086e36be40bf9603c0af0a5d3fe9802128bacc395193c75d7d52eb15b66c1a4
- MD5 398e2172f1147e5d4f09d48ae1e1fdb0
- SHA1 165f9ded89daa8ecba9c7dab7d616b06da2e866d
- SHA512 570ee7e46908d30a1574249c51bc6d7915d3c3c812c35bacfb5868bea297454e05a247f49bb5ee473bedbb90bce8e5de95a5b98656b96924b99b8d53b707ae51
- SSDEEP 1536:uK/9NIT1BIF78ny9rZ9dewl0D7XaxI3pmnOe:u0zIT3y9vdfl0D7XaxI3pmO
- TLSH T1CC431A0E7BD44944E6BD4BBF84F640120778EC43A622FA1E4ED1A45A3B337D98D48BB5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10