General
- Target Payload.exe
- Size 55KB
- Sample261025-swbpcagv9t
- SHA256 8520c1de8806c8d26a9b0c027bd39ce3fd25a28733b966131af2e0f708abaf3a
- MD5 f9be2642eb8a6c5e440a1cf8cede7d32
- SHA1 a33a0c824a92a42d07086adc8d9daeb6e74e8a51
- SHA512 4a5c6648442f1856dc1bb111b09a84ab48ca3c86d1433f79f37d3c62d2291a7cd0877eadd7fa7982a3c198421d6b3fda7b1a3e3f16408af775c37fe12fde6163
- SSDEEP 768:uROsVSt1ManUk2N/PSJ2hrcr3UwhkSN3mwFvfu0YMDHPsML7XJSxI3pm6m:uR/gDnqN/PSAqzDWwsNMDDXExI3pm6m
- TLSH T189432744BFEA4A01E2BD8F3468F655150634AA63E532EB1F4CD668DB17327C58C80FE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Payload.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
<- NjRAT 0.7d Horror Edition ->
Botnet
-
Victim
C2
-
UA3iz-40659.portmap.host:6060
Mutex
-
a6c56cd45e0a660f227421eb0aa9ddea
Attributes
-
reg_key
a6c56cd45e0a660f227421eb0aa9ddea
-
splitter
Y262SUCZ4UJJ
Targets
-
- Target Payload.exe
- Size 55KB
- SHA256 8520c1de8806c8d26a9b0c027bd39ce3fd25a28733b966131af2e0f708abaf3a
- MD5 f9be2642eb8a6c5e440a1cf8cede7d32
- SHA1 a33a0c824a92a42d07086adc8d9daeb6e74e8a51
- SHA512 4a5c6648442f1856dc1bb111b09a84ab48ca3c86d1433f79f37d3c62d2291a7cd0877eadd7fa7982a3c198421d6b3fda7b1a3e3f16408af775c37fe12fde6163
- SSDEEP 768:uROsVSt1ManUk2N/PSJ2hrcr3UwhkSN3mwFvfu0YMDHPsML7XJSxI3pm6m:uR/gDnqN/PSAqzDWwsNMDDXExI3pm6m
- TLSH T189432744BFEA4A01E2BD8F3468F655150634AA63E532EB1F4CD668DB17327C58C80FE6
- MD5 SHA1 SHA512 SSDEEP TLSH