Analysis
- max time kernel
148s - max time network
127s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
- submitted
02/11/2026, 20:03
General
- Target NjRAT-Horror-Edition-main/NjRAT-Horror-Edition-main/njRAT 0.7d Horror Edition/Plugin/Screamer1.exe
- Size 844KB
- Sample261102-ys4hvae18r
- SHA256 00201a2fd4916193c9c7bbba7be6a77fa5876085480b67da4e1228fd8b23ae5f
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\NjRAT-Horror-Edition-main\NjRAT-Horror-Edition-main\njRAT 0.7d Horror Edition\Plugin\Screamer1.exe"C:\Users\Admin\AppData\Local\Temp\NjRAT-Horror-Edition-main\NjRAT-Horror-Edition-main\njRAT 0.7d Horror Edition\Plugin\Screamer1.exe"1⤵
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x00000000000004E8 0x00000000000004D41⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4224-0-0x00007FFFF3E2A000-0x00007FFFF3E2B000-memory.dmp
memory/4224-1-0x000000001B760000-0x000000001B806000-memory.dmp
memory/4224-2-0x00007FFFF3B30000-0x00007FFFF4568000-memory.dmp
memory/4224-3-0x000000001BD80000-0x000000001C24E000-memory.dmp
memory/4224-4-0x000000001C2F0000-0x000000001C38C000-memory.dmp
memory/4224-5-0x00007FFFF3B30000-0x00007FFFF4568000-memory.dmp
memory/4224-6-0x00007FFFF3B30000-0x00007FFFF4568000-memory.dmp
memory/4224-8-0x00000000029F0000-0x00000000029F8000-memory.dmp
memory/4224-9-0x000000001C400000-0x000000001C44C000-memory.dmp
memory/4224-7-0x00007FFFF3B30000-0x00007FFFF4568000-memory.dmp
memory/4224-10-0x00007FFFF3B30000-0x00007FFFF4568000-memory.dmp
memory/4224-11-0x00007FFFF3B30000-0x00007FFFF4568000-memory.dmp
memory/4224-12-0x00007FFFF3B30000-0x00007FFFF4568000-memory.dmp
memory/4224-13-0x00007FFFF3B30000-0x00007FFFF4568000-memory.dmp
memory/4224-14-0x00007FFFF3B30000-0x00007FFFF4568000-memory.dmp
memory/4224-16-0x00007FFFF3B30000-0x00007FFFF4568000-memory.dmp
memory/4224-15-0x00007FFFF3B30000-0x00007FFFF4568000-memory.dmp
memory/4224-17-0x00007FFFF3B30000-0x00007FFFF4568000-memory.dmp
memory/4224-18-0x00007FFFF3B30000-0x00007FFFF4568000-memory.dmp
memory/4224-19-0x00007FFFF3B30000-0x00007FFFF4568000-memory.dmp
memory/4224-20-0x00007FFFF3B30000-0x00007FFFF4568000-memory.dmp
memory/4224-21-0x00007FFFF3B30000-0x00007FFFF4568000-memory.dmp
memory/4224-22-0x00007FFFF3B30000-0x00007FFFF4568000-memory.dmp