General
- Target Payload.exe
- Size 59KB
- Sample261111-tj41ssad86
- SHA256 3224bc015a149b619ead0d9a2364e3ab77e9c44843d54f1d468fd1acb91f7fe0
- MD5 1ff8a110b220568b98f40a0544af25d9
- SHA1 1588c94dbf26c9497a7d905d2fa33604b4a41d61
- SHA512 d556870d5a98f54e277703f7f141a2b371c6f5576b55eec776ca2b458500d915e3e364f09d7a77513a27257127281d9dde42688e688a8ebd2e60b168ec296036
- SSDEEP 768:SavX8UMdant5iTx1dA6Mk1oFtE27qb/FrMwECl9Z4DYPEXfL7XfSxI3pm+Oe:LLMdSIT0k1WB+dgwl0DfXaxI3pm+Oe
- TLSH T1EC430A0E7BD44944E6BD4BBF94F140120778EC47A622FA1E4AD6A45A3B337D98D04FB2
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Payload.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
<- NjRAT 0.7d Horror Edition ->
Botnet
-
Victim
C2
-
kfjrtijhgufdhngj-48863.portmap.host:48863:48863
Mutex
-
007e12c5be6410e093e9ecb4c8142640
Attributes
-
reg_key
007e12c5be6410e093e9ecb4c8142640
-
splitter
Y262SUCZ4UJJ
Targets
-
- Target Payload.exe
- Size 59KB
- SHA256 3224bc015a149b619ead0d9a2364e3ab77e9c44843d54f1d468fd1acb91f7fe0
- MD5 1ff8a110b220568b98f40a0544af25d9
- SHA1 1588c94dbf26c9497a7d905d2fa33604b4a41d61
- SHA512 d556870d5a98f54e277703f7f141a2b371c6f5576b55eec776ca2b458500d915e3e364f09d7a77513a27257127281d9dde42688e688a8ebd2e60b168ec296036
- SSDEEP 768:SavX8UMdant5iTx1dA6Mk1oFtE27qb/FrMwECl9Z4DYPEXfL7XfSxI3pm+Oe:LLMdSIT0k1WB+dgwl0DfXaxI3pm+Oe
- TLSH T1EC430A0E7BD44944E6BD4BBF94F140120778EC47A622FA1E4AD6A45A3B337D98D04FB2
- MD5 SHA1 SHA512 SSDEEP TLSH