General
- Target Payload_Slayed.exe
- Size 55KB
- Sample261103-epmalsht4k
- SHA256 6a6b149ec1db36b22ffb6edf026c79c3cb353b66a903eae266c8d9fd3884ba46
- MD5 b1a9891cda17d60c5d00a7061f8055db
- SHA1 532c8738712dcc6826e6b05a2be702fa8b607206
- SHA512 00c782c7d6731c0150c3f1ed66ba16f3dcab5db0de59580d1f27e8e488f0b86312fc80da2524b7f56260f0d08ed139077abd241413fe54c318c687cebd07aab8
- SSDEEP 768:fUUhQS5Hik5RfbtlzsJj84l5RkVHoTHygfgE8v5R4Y/DBeudAVRK31/zAmDk3FPo:/hQSBIj8OGWHpgE45uYVeC31rAmDAFI
- TLSH T1D2430788BBE58818E0FFAF786C7691214670B95BE922D71C48D590DA37337C46A04FF6
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Payload_Slayed.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Payload_Slayed.exe
Resource
win10ltsc2021-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
Payload_Slayed.exe
Resource
win11-20260911-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
<- NjRAT 0.7d Horror Edition ->
Botnet
-
Victim
C2
-
127.0.0.1:6522
Mutex
-
b6f83ebf0bce1d5c2e2e278edaabc64b
Attributes
-
reg_key
b6f83ebf0bce1d5c2e2e278edaabc64b
-
splitter
Y262SUCZ4UJJ
Targets
-
- Target Payload_Slayed.exe
- Size 55KB
- SHA256 6a6b149ec1db36b22ffb6edf026c79c3cb353b66a903eae266c8d9fd3884ba46
- MD5 b1a9891cda17d60c5d00a7061f8055db
- SHA1 532c8738712dcc6826e6b05a2be702fa8b607206
- SHA512 00c782c7d6731c0150c3f1ed66ba16f3dcab5db0de59580d1f27e8e488f0b86312fc80da2524b7f56260f0d08ed139077abd241413fe54c318c687cebd07aab8
- SSDEEP 768:fUUhQS5Hik5RfbtlzsJj84l5RkVHoTHygfgE8v5R4Y/DBeudAVRK31/zAmDk3FPo:/hQSBIj8OGWHpgE45uYVeC31rAmDAFI
- TLSH T1D2430788BBE58818E0FFAF786C7691214670B95BE922D71C48D590DA37337C46A04FF6
- MD5 SHA1 SHA512 SSDEEP TLSH