General
- Target Payload.exe
- Size 55KB
- Sample261025-qcd91szxht
- SHA256 7dc36fa2e4a9e71d945f935058019a0dab71c33645196de570bc93430ef6a744
- MD5 2ffd76692d9fad509e53ea77c2edd60e
- SHA1 85a808f94f72e352b0c2b19312ac33739907496b
- SHA512 879414ea54a77c7f19fae93a1d3b3b78097ac35d47b8558015536f620e4b4ceca4b862c01c4d832c3ea5b1657420994e6904811a3598d8660eaedf5e3ed936e2
- SSDEEP 1536:ir21gDnlNAbX0byQDJPwsNMD/XExI3pmam:v1gDnGk2QDJwsNMD/XExI3pm
- TLSH T128431744BFEA4A01E2BC8F34A9F655150634BA63F532EB1E48D568EB17327C58C40FE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Extracted
Family
-
njrat
Version
-
<- NjRAT 0.7d Horror Edition ->
Botnet
-
Victim
C2
-
tcp://znaddfgdgvdasgG123-31391.portmap.host:31391
Mutex
-
a89df4f9fd7251e2f8d3324d6230e956
Attributes
-
reg_key
a89df4f9fd7251e2f8d3324d6230e956
-
splitter
Y262SUCZ4UJJ
Targets
-
- Target Payload.exe
- Size 55KB
- SHA256 7dc36fa2e4a9e71d945f935058019a0dab71c33645196de570bc93430ef6a744
- MD5 2ffd76692d9fad509e53ea77c2edd60e
- SHA1 85a808f94f72e352b0c2b19312ac33739907496b
- SHA512 879414ea54a77c7f19fae93a1d3b3b78097ac35d47b8558015536f620e4b4ceca4b862c01c4d832c3ea5b1657420994e6904811a3598d8660eaedf5e3ed936e2
- SSDEEP 1536:ir21gDnlNAbX0byQDJPwsNMD/XExI3pmam:v1gDnGk2QDJwsNMD/XExI3pm
- TLSH T128431744BFEA4A01E2BC8F34A9F655150634BA63F532EB1E48D568EB17327C58C40FE6
- MD5 SHA1 SHA512 SSDEEP TLSH