General
- Target Payload.exe
- Size 66KB
- Sample261108-xscvfstsfw
- SHA256 4bed72872ab23db943ce53f460d979ff750f9518124dfaaf8525dba0979f2604
- MD5 6e4709e7ff4026d64d84b3bb6e699619
- SHA1 8a9515ce29098af3b7ec4148641b1d883e21d1cd
- SHA512 a932bf1affbe9956d146bff013bb202015b2e7b0d28c0cfd44372551eec80a4b621cdf9c2f6121f152eb60df1cefc7f38853413a3e8688f26a7ff4b78e69fdf1
- SSDEEP 1536:8lEm8OuBRpbey8bIbDlMFTn3bF9CKxkGS9FLuOJ/abMX4n2N:8+mEEyHCFj3bVaF9Buy/abMb
- TLSH T1CE63F21E5CCD4751F5695EB43D7482BB2AB0E3217192A9A70DFC348EB0842797B4C8F6
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Payload.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
<- NjRAT 0.7d Horror Edition ->
Botnet
-
Victim
C2
-
alibabaawas9.ddns.net:4444
Mutex
-
732a1e260e69d348c8a89911f261293d
Attributes
-
reg_key
732a1e260e69d348c8a89911f261293d
-
splitter
Y262SUCZ4UJJ
Targets
-
- Target Payload.exe
- Size 66KB
- SHA256 4bed72872ab23db943ce53f460d979ff750f9518124dfaaf8525dba0979f2604
- MD5 6e4709e7ff4026d64d84b3bb6e699619
- SHA1 8a9515ce29098af3b7ec4148641b1d883e21d1cd
- SHA512 a932bf1affbe9956d146bff013bb202015b2e7b0d28c0cfd44372551eec80a4b621cdf9c2f6121f152eb60df1cefc7f38853413a3e8688f26a7ff4b78e69fdf1
- SSDEEP 1536:8lEm8OuBRpbey8bIbDlMFTn3bF9CKxkGS9FLuOJ/abMX4n2N:8+mEEyHCFj3bVaF9Buy/abMb
- TLSH T1CE63F21E5CCD4751F5695EB43D7482BB2AB0E3217192A9A70DFC348EB0842797B4C8F6
- MD5 SHA1 SHA512 SSDEEP TLSH