General
- Target Test.exe
- Size 120KB
- Sample261025-nt7lsag16l
- SHA256 cfe135105c797c2da9a085b7722fe381613a73e9fe8c2e93653ca027d80e7904
- MD5 21921d14876958bf6c3035275c8a7ded
- SHA1 8a1b815d72e09430673a4d7c14d3d28fed40a3d3
- SHA512 b68ca19bf50f0b5b0ee354b2e621690ee566840a5733d4c776f089a056117eb4993a382f76494965bfc34d257f8e3500fea0309ec4ccfa503fd894e84c2b1460
- SSDEEP 3072:ToDnwXTYDtwsNMDeXExI3pmm76MIoU6Iow1FQMGGqU3:ToEjcvMARv4ow1FzH3
- TLSH T1E0C38C44FF965A41E27D8F3468BA49160738BD53E922DB0F09D878DB1B327C68C90F96
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Test.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
<- NjRAT 0.7d Horror Edition ->
Botnet
-
VicTim
C2
-
188.53.212.210:6522
Mutex
-
e335801764da7011b9acdc7a6f4e1ac3
Attributes
-
reg_key
e335801764da7011b9acdc7a6f4e1ac3
-
splitter
Y262SUCZ4UJJ
Targets
-
- Target Test.exe
- Size 120KB
- SHA256 cfe135105c797c2da9a085b7722fe381613a73e9fe8c2e93653ca027d80e7904
- MD5 21921d14876958bf6c3035275c8a7ded
- SHA1 8a1b815d72e09430673a4d7c14d3d28fed40a3d3
- SHA512 b68ca19bf50f0b5b0ee354b2e621690ee566840a5733d4c776f089a056117eb4993a382f76494965bfc34d257f8e3500fea0309ec4ccfa503fd894e84c2b1460
- SSDEEP 3072:ToDnwXTYDtwsNMDeXExI3pmm76MIoU6Iow1FQMGGqU3:ToEjcvMARv4ow1FzH3
- TLSH T1E0C38C44FF965A41E27D8F3468BA49160738BD53E922DB0F09D878DB1B327C68C90F96
- MD5 SHA1 SHA512 SSDEEP TLSH