General
- Target Payload.exe
- Size 55KB
- Sample261029-tr6jlaet2j
- SHA256 a8ebc1fc211e49f0ab8b0b6e3aca2342d79e9f70df6c0bb67372247600fd649f
- MD5 40d92cfc0cf0bbbba1f2dbd8586557f0
- SHA1 03086c6522cb5f4ae166700d1e8d9c8612bc4c6f
- SHA512 91d08eeba83162004fcf4305dfe47f14f3cd245a2aab73dbb0267de4c0ae56c1c5639ca1a5173a0fe42348b5b4e8224c95f4f98762e33e446c9ac2e2779dc3d7
- SSDEEP 1536:Gwws4DnAN7jytFADRwsNMD2XExI3pmjm:dT4DnA2PADRwsNMD2XExI3pm
- TLSH T173432844BFEA4A05E2BD8F3468F555150A34BA63E532EB1F48D668EB13327C58C40FE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
Payload.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Payload.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
<- NjRAT 0.7d Horror Edition ->
Botnet
-
Victim
C2
-
24.tcp.cpolar.top:12105
Mutex
-
282ead18d6573a3b2575bc669e4074aa
Attributes
-
reg_key
282ead18d6573a3b2575bc669e4074aa
-
splitter
Y262SUCZ4UJJ
Targets
-
- Target Payload.exe
- Size 55KB
- SHA256 a8ebc1fc211e49f0ab8b0b6e3aca2342d79e9f70df6c0bb67372247600fd649f
- MD5 40d92cfc0cf0bbbba1f2dbd8586557f0
- SHA1 03086c6522cb5f4ae166700d1e8d9c8612bc4c6f
- SHA512 91d08eeba83162004fcf4305dfe47f14f3cd245a2aab73dbb0267de4c0ae56c1c5639ca1a5173a0fe42348b5b4e8224c95f4f98762e33e446c9ac2e2779dc3d7
- SSDEEP 1536:Gwws4DnAN7jytFADRwsNMD2XExI3pmjm:dT4DnA2PADRwsNMD2XExI3pm
- TLSH T173432844BFEA4A05E2BD8F3468F555150A34BA63E532EB1F48D668EB13327C58C40FE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10