General
- Target Payload.exe
- Size 59KB
- Sample261111-a862xaes4v
- SHA256 a95eb050b904b1c802c779635081184c8281de94ae0d7fb1922f929cc2fa9b68
- MD5 447f01ff978eaf40a4c03313218f8d16
- SHA1 b2c9860ac3d3a2618ae23a2a4b5fe800cb69c271
- SHA512 5a8ca6a8645cf87ecb7996617ac3356531e90a5ebd2d0097a1d97a7aabdb2dfebc5b619786dddfd657f5bba88386d2af67bc185b69ecbc3896dfecb3811f7f2e
- SSDEEP 1536:WxPm9/IT3MpdoJPdywl0DbXaxI3pmVOe:WVSIT8pdo9djl0DbXaxI3pmk
- TLSH T194431A0E7BD54944D6BD4BBF94F540120778EC43A622FA1D4AD2E45A3B337D98E04BB1
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Payload.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Payload.exe
Resource
win10ltsc2021-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
Payload.exe
Resource
win11-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral4
Sample
Payload.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
<- NjRAT 0.7d Horror Edition ->
Botnet
-
Victim
C2
-
1.tcp.cpolar.cn:23207
Mutex
-
d523610367a2572b49ef6e5374483e11
Attributes
-
reg_key
d523610367a2572b49ef6e5374483e11
-
splitter
Y262SUCZ4UJJ
Targets
-
- Target Payload.exe
- Size 59KB
- SHA256 a95eb050b904b1c802c779635081184c8281de94ae0d7fb1922f929cc2fa9b68
- MD5 447f01ff978eaf40a4c03313218f8d16
- SHA1 b2c9860ac3d3a2618ae23a2a4b5fe800cb69c271
- SHA512 5a8ca6a8645cf87ecb7996617ac3356531e90a5ebd2d0097a1d97a7aabdb2dfebc5b619786dddfd657f5bba88386d2af67bc185b69ecbc3896dfecb3811f7f2e
- SSDEEP 1536:WxPm9/IT3MpdoJPdywl0DbXaxI3pmVOe:WVSIT8pdo9djl0DbXaxI3pmk
- TLSH T194431A0E7BD54944D6BD4BBF94F540120778EC43A622FA1D4AD2E45A3B337D98E04BB1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10