General
- Target Payload.exe
- Size 55KB
- Sample261029-rad2xazyby
- SHA256 6418690b05a6b35c55f460b3a7d86638cecf3d15e3b4650833b4bf39b8cf419a
- MD5 d844607ca44a7d0a011ea793727b8017
- SHA1 99036ee2202bea97ec6a2791e5459b1b0aa86c8f
- SHA512 1eaef492aa2ae947bbc783d75643d4acb6b54e428b3782c2414945ed08567cdf95686c2256c2bcaf32a3c92e6b2a17b443d6c55619160acbf83641d24cb35681
- SSDEEP 1536:joUMsDnKNgpynpGSDYwsNMD/XExI3pmVm:usDn1on4SDYwsNMD/XExI3pm
- TLSH T1EE431844BFEA4A05E2BD8F3468F645150634BA63E532EB1F48D568EB13327C58C80FE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Payload.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Payload.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
<- NjRAT 0.7d Horror Edition ->
Botnet
-
123
C2
-
kbpnl-188-71-253-93.run.pinggy-free.link:34161
Mutex
-
67fc25dddfe3fc37e078bc5ecff8a874
Attributes
-
reg_key
67fc25dddfe3fc37e078bc5ecff8a874
-
splitter
Y262SUCZ4UJJ
Targets
-
- Target Payload.exe
- Size 55KB
- SHA256 6418690b05a6b35c55f460b3a7d86638cecf3d15e3b4650833b4bf39b8cf419a
- MD5 d844607ca44a7d0a011ea793727b8017
- SHA1 99036ee2202bea97ec6a2791e5459b1b0aa86c8f
- SHA512 1eaef492aa2ae947bbc783d75643d4acb6b54e428b3782c2414945ed08567cdf95686c2256c2bcaf32a3c92e6b2a17b443d6c55619160acbf83641d24cb35681
- SSDEEP 1536:joUMsDnKNgpynpGSDYwsNMD/XExI3pmVm:usDn1on4SDYwsNMD/XExI3pm
- TLSH T1EE431844BFEA4A05E2BD8F3468F645150634BA63E532EB1F48D568EB13327C58C80FE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10