General
- Target Payload (1).exe
- Size 55KB
- Sample261029-nddzjaah88
- SHA256 3b0d994ad1b78b5c4e96a384cb5d96778d93dea24fadb5e3d0cfefd1095df2cf
- MD5 c5811ae17e1753a29ec1be76a5de7b5a
- SHA1 60577d2ddc2b86065e87ebd61bc91f9ed2814d67
- SHA512 c8c5c45edca13f777c15655ce70ee66e863872398c3edd1cd8f8e62614397f49f78f7ba22c2ed966f4aa28c63fe3234174d4c18958c96f8febc21e57755fd4bd
- SSDEEP 1536:4F84DnANrjyHRADKwsNMDSXExI3pmnJm:T4DnQ2xADKwsNMDSXExI3pm
- TLSH T173432844BFEA4A01E2BD8F3469F655150674BA23E532EB1F48D668EB13327C58C40FE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Payload (1).exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
Payload (1).exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
<- NjRAT 0.7d Horror Edition ->
Botnet
-
Victim
C2
-
10.tcp.cpolar.top:13754
Mutex
-
cc3c55b246128f6114a83e0cbf6e8ec9
Attributes
-
reg_key
cc3c55b246128f6114a83e0cbf6e8ec9
-
splitter
Y262SUCZ4UJJ
Targets
-
- Target Payload (1).exe
- Size 55KB
- SHA256 3b0d994ad1b78b5c4e96a384cb5d96778d93dea24fadb5e3d0cfefd1095df2cf
- MD5 c5811ae17e1753a29ec1be76a5de7b5a
- SHA1 60577d2ddc2b86065e87ebd61bc91f9ed2814d67
- SHA512 c8c5c45edca13f777c15655ce70ee66e863872398c3edd1cd8f8e62614397f49f78f7ba22c2ed966f4aa28c63fe3234174d4c18958c96f8febc21e57755fd4bd
- SSDEEP 1536:4F84DnANrjyHRADKwsNMDSXExI3pmnJm:T4DnQ2xADKwsNMDSXExI3pm
- TLSH T173432844BFEA4A01E2BD8F3469F655150674BA23E532EB1F48D668EB13327C58C40FE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10