General
- Target Payload.exe
- Size 55KB
- Sample261026-vtp53avs6k
- SHA256 339e28c282fe70329336513abeccf6fdb272ebcc8a0a70ceeb0ada96b8e67669
- MD5 8a6c07cffbf1e99e4bdee3f2b6cb3425
- SHA1 870c2fb8dae8403c8cbacd63d58e17437f4786a4
- SHA512 166ddbdeaf638771b4cbce94d96a55a4b637d98f1063803334946f87c0cc0fb3d81b1b360687510bd90a6895693e0cec990b74eaa03d1cc6048d3678dce0a55d
- SSDEEP 1536:ZCbsDntNy7sS5ZCDGwsNMDhXExI3pmwm:QsDnm7V/CDGwsNMDhXExI3pm
- TLSH T160431844BFEA4A05E2BC8F3468F655150A34AA63F932DB1F48D568EB17327C58C40FE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Payload.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
<- NjRAT 0.7d Horror Edition ->
Botnet
-
Victim
C2
-
192.168.174.1:8288
Mutex
-
cec74b2c01a11b7d0cb4036d6116cbe4
Attributes
-
reg_key
cec74b2c01a11b7d0cb4036d6116cbe4
-
splitter
Y262SUCZ4UJJ
Targets
-
- Target Payload.exe
- Size 55KB
- SHA256 339e28c282fe70329336513abeccf6fdb272ebcc8a0a70ceeb0ada96b8e67669
- MD5 8a6c07cffbf1e99e4bdee3f2b6cb3425
- SHA1 870c2fb8dae8403c8cbacd63d58e17437f4786a4
- SHA512 166ddbdeaf638771b4cbce94d96a55a4b637d98f1063803334946f87c0cc0fb3d81b1b360687510bd90a6895693e0cec990b74eaa03d1cc6048d3678dce0a55d
- SSDEEP 1536:ZCbsDntNy7sS5ZCDGwsNMDhXExI3pmwm:QsDnm7V/CDGwsNMDhXExI3pm
- TLSH T160431844BFEA4A05E2BC8F3468F655150A34AA63F932DB1F48D568EB17327C58C40FE6
- MD5 SHA1 SHA512 SSDEEP TLSH