General
- Target Payload.exe
- Size 55KB
- Sample261029-q8ssaact21
- SHA256 9ca87fdcf6cb65dbacb709c0d8d8430d02d7f5274d69cf5b27b46e6da822045d
- MD5 6addb8750f54163b4f7e7b1bc3d7f70b
- SHA1 ec2a70badd764c75f903385c967ff841a785f0b1
- SHA512 4e6266c5fefad0c32ab72b58d490e0a5b698a109184556a050ce7e3597f680f30d850070071fe792295b0e7ac24ab298f2df7bdfeb50df40dd8f91fd2340f9b6
- SSDEEP 1536:aoUMsDnKNgpynpGSDYwsNMD2XExI3pmJm:xsDn1on4SDYwsNMD2XExI3pm
- TLSH T1A7431744BFEA4A05E2BD8F3468F645150634BA63E532EB1F48D568EB17327C58C80FE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Payload.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Payload.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
<- NjRAT 0.7d Horror Edition ->
Botnet
-
123
C2
-
ohtcy-188-71-253-93.run.pinggy-free.link:40983
Mutex
-
faba4196a3de6b0a20149ef6ea29e90b
Attributes
-
reg_key
faba4196a3de6b0a20149ef6ea29e90b
-
splitter
Y262SUCZ4UJJ
Targets
-
- Target Payload.exe
- Size 55KB
- SHA256 9ca87fdcf6cb65dbacb709c0d8d8430d02d7f5274d69cf5b27b46e6da822045d
- MD5 6addb8750f54163b4f7e7b1bc3d7f70b
- SHA1 ec2a70badd764c75f903385c967ff841a785f0b1
- SHA512 4e6266c5fefad0c32ab72b58d490e0a5b698a109184556a050ce7e3597f680f30d850070071fe792295b0e7ac24ab298f2df7bdfeb50df40dd8f91fd2340f9b6
- SSDEEP 1536:aoUMsDnKNgpynpGSDYwsNMD2XExI3pmJm:xsDn1on4SDYwsNMD2XExI3pm
- TLSH T1A7431744BFEA4A05E2BD8F3468F645150634BA63E532EB1F48D568EB17327C58C80FE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10