General
- Target Payload.exe
- Size 55KB
- Sample261109-yqrfha1w8m
- SHA256 84f3f62d096c4fb935ca10d227ea3aa5d99945fdb8ad4d66679b93eaef3de771
- MD5 fbb8a9ced5780e001645272f0e93b063
- SHA1 f607c88781d33f490b9dce81dd8fb459f946e64f
- SHA512 b83f96dda15c2ff7621601733d3ea5174b6492385146fe6461a21bbbcb8833e36d6345037fb5d702b0f37716334d96ac49697c872684e70cd082ca68ffcb59a2
- SSDEEP 768:tQiyFut1MankI2N9hi8QR3QRkSNcmwFvfu0YMDHPsGL7XJSxI3pmHm:tQF8Dn2N9hi8KQDpwsNMDdXExI3pmHm
- TLSH T168432844BFEA4A01E2BC8F7468F655150634BA63E932EB1F48D668DB17327C58C40FE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Payload.exe
Resource
ubuntu2204-amd64-20261019-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Payload.exe
Resource
debian9-armhf-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
Payload.exe
Resource
debian9-mipsbe-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
Payload.exe
Resource
debian9-mipsel-20260513-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
<- NjRAT 0.7d Horror Edition ->
Botnet
-
Victim
C2
-
sh3bed-53863.portmap.host:5551
Mutex
-
26fcdfe21144adaa3740c8139183b655
Attributes
-
reg_key
26fcdfe21144adaa3740c8139183b655
-
splitter
Y262SUCZ4UJJ
Targets
-
- Target Payload.exe
- Size 55KB
- SHA256 84f3f62d096c4fb935ca10d227ea3aa5d99945fdb8ad4d66679b93eaef3de771
- MD5 fbb8a9ced5780e001645272f0e93b063
- SHA1 f607c88781d33f490b9dce81dd8fb459f946e64f
- SHA512 b83f96dda15c2ff7621601733d3ea5174b6492385146fe6461a21bbbcb8833e36d6345037fb5d702b0f37716334d96ac49697c872684e70cd082ca68ffcb59a2
- SSDEEP 768:tQiyFut1MankI2N9hi8QR3QRkSNcmwFvfu0YMDHPsGL7XJSxI3pmHm:tQF8Dn2N9hi8KQDpwsNMDdXExI3pmHm
- TLSH T168432844BFEA4A01E2BC8F7468F655150634BA63E932EB1F48D668DB17327C58C40FE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10