Analysis
- max time kernel
64s - max time network
64s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260911-en - resource tags
- submitted
07/11/2026, 12:27
General
- Target njRAT 0.7d Horror Edition/NjRat 0.7D Horror Edition.exe
- Size 15.4MB
- Sample261107-pm4f8aeh52
- SHA256 bb35eddc6b3ccc8aae668176a3987be76ca66c3c0c01074e5ee9cd7d145ce6ce
Malware Config
Signatures
- Suspicious use of FindShellTrayWindow 3 IoCs
- Suspicious use of SendNotifyMessage 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\njRAT 0.7d Horror Edition\NjRat 0.7D Horror Edition.exe"C:\Users\Admin\AppData\Local\Temp\njRAT 0.7d Horror Edition\NjRat 0.7D Horror Edition.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x4f8 0x3fc1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4252-0-0x00007FF9A9A55000-0x00007FF9A9A56000-memory.dmp
memory/4252-1-0x000000001C730000-0x000000001C7D6000-memory.dmp
memory/4252-2-0x00007FF9A97A0000-0x00007FF9AA141000-memory.dmp
memory/4252-3-0x000000001CCB0000-0x000000001D17E000-memory.dmp
memory/4252-4-0x000000001D280000-0x000000001D31C000-memory.dmp
memory/4252-5-0x00007FF9A97A0000-0x00007FF9AA141000-memory.dmp
memory/4252-6-0x00007FF9A97A0000-0x00007FF9AA141000-memory.dmp
memory/4252-7-0x00007FF9A97A0000-0x00007FF9AA141000-memory.dmp
memory/4252-8-0x00007FF9A97A0000-0x00007FF9AA141000-memory.dmp
memory/4252-10-0x00007FF9A97A0000-0x00007FF9AA141000-memory.dmp
memory/4252-11-0x000000001D3E0000-0x000000001D42C000-memory.dmp
memory/4252-9-0x0000000002130000-0x0000000002138000-memory.dmp
memory/4252-12-0x00007FF9A97A0000-0x00007FF9AA141000-memory.dmp
memory/4252-13-0x00007FF9A97A0000-0x00007FF9AA141000-memory.dmp
memory/4252-14-0x00007FF9A97A0000-0x00007FF9AA141000-memory.dmp
memory/4252-15-0x00007FF9A97A0000-0x00007FF9AA141000-memory.dmp
memory/4252-16-0x00007FF9A97A0000-0x00007FF9AA141000-memory.dmp
memory/4252-17-0x00007FF9A97A0000-0x00007FF9AA141000-memory.dmp
memory/4252-18-0x00007FF9A97A0000-0x00007FF9AA141000-memory.dmp
memory/4252-19-0x00007FF9A97A0000-0x00007FF9AA141000-memory.dmp
memory/4252-20-0x00007FF9A97A0000-0x00007FF9AA141000-memory.dmp
memory/4252-21-0x00007FF9A97A0000-0x00007FF9AA141000-memory.dmp
memory/4252-22-0x00007FF9A97A0000-0x00007FF9AA141000-memory.dmp
memory/4252-23-0x00007FF9A97A0000-0x00007FF9AA141000-memory.dmp
memory/4252-24-0x000000001E970000-0x000000001E982000-memory.dmp
memory/4252-25-0x00007FF9A97A0000-0x00007FF9AA141000-memory.dmp
memory/4252-26-0x00007FF9A97A0000-0x00007FF9AA141000-memory.dmp
memory/4252-27-0x00007FF9A9A55000-0x00007FF9A9A56000-memory.dmp
memory/4252-28-0x00007FF9A97A0000-0x00007FF9AA141000-memory.dmp
memory/4252-29-0x00007FF9A97A0000-0x00007FF9AA141000-memory.dmp
memory/4252-30-0x00007FF9A97A0000-0x00007FF9AA141000-memory.dmp
memory/4252-31-0x00007FF9A97A0000-0x00007FF9AA141000-memory.dmp
memory/4252-32-0x00007FF9A97A0000-0x00007FF9AA141000-memory.dmp
memory/4252-33-0x00007FF9A97A0000-0x00007FF9AA141000-memory.dmp
memory/4252-34-0x00007FF9A97A0000-0x00007FF9AA141000-memory.dmp
memory/4252-35-0x00007FF9A97A0000-0x00007FF9AA141000-memory.dmp
memory/4252-36-0x00007FF9A97A0000-0x00007FF9AA141000-memory.dmp
memory/4252-37-0x00007FF9A97A0000-0x00007FF9AA141000-memory.dmp