General
- Target Payload.exe
- Size 59KB
- Sample261111-tb97vay1fv
- SHA256 bc106dec5802eb9fa4df3fcf3414534583db2caaa52567a25bb4a6ecb676d48a
- MD5 90b2f69ebc92bb89612d115aea642b7f
- SHA1 e1950dd0130e071eafffff7e5a161a910c685ae4
- SHA512 669753c9986d392d497dce11090deb8d90bf18e470f92e32ca42ada0bcdafce1bb9d4c17c48fdb36705137f6cc0c35aa46472a6391b3222bdae3e8ffeabf8fe5
- SSDEEP 1536:Sz7HqYITjUsJiB5dNwl0DIXaxI3pmBOe:SzjxITxJizdel0DIXaxI3pmo
- TLSH T132431A0D7BD54944D6BD0BBF94F140120778EC43A622FA1E4AD6A49A3B337C9CE48BB5
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Payload.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
<- NjRAT 0.7d Horror Edition ->
Botnet
-
Victim
C2
-
mrroborte.ddns.net:4444
Mutex
-
8a27bf707a0aea5123c17bd28e7e4cdf
Attributes
-
reg_key
8a27bf707a0aea5123c17bd28e7e4cdf
-
splitter
Y262SUCZ4UJJ
Targets
-
- Target Payload.exe
- Size 59KB
- SHA256 bc106dec5802eb9fa4df3fcf3414534583db2caaa52567a25bb4a6ecb676d48a
- MD5 90b2f69ebc92bb89612d115aea642b7f
- SHA1 e1950dd0130e071eafffff7e5a161a910c685ae4
- SHA512 669753c9986d392d497dce11090deb8d90bf18e470f92e32ca42ada0bcdafce1bb9d4c17c48fdb36705137f6cc0c35aa46472a6391b3222bdae3e8ffeabf8fe5
- SSDEEP 1536:Sz7HqYITjUsJiB5dNwl0DIXaxI3pmBOe:SzjxITxJizdel0DIXaxI3pmo
- TLSH T132431A0D7BD54944D6BD0BBF94F140120778EC43A622FA1E4AD6A49A3B337C9CE48BB5
- MD5 SHA1 SHA512 SSDEEP TLSH