General
- Target Payload.exe
- Size 59KB
- Sample261112-cv6v4azz4j
- SHA256 c944bf98883c94a3539c2785744ef4f3b46637aa8b7f3a4ca13a3465ccaf91bb
- MD5 f63836798627979b685bcc1086a51ba5
- SHA1 fba03480dfe1e6e269dc743d2c5d8ba05415d5c4
- SHA512 26a0ae488cdcffa740a1487aeee094e492c38c19299202255e22046fd6b25558bfe5abf98c74f707ad4f6458ae8c40930972cd836950dc3cbdb7df0f8cb9ec61
- SSDEEP 1536:Pz7HqYITjUsJiB5dNwl0DaXaxI3pm6Oe:PzjxITxJizdel0DaXaxI3pmh
- TLSH T19B431A0D7BD54944D6BD0BBF84F140120778EC43A622FA1E4AD6A49A3B337C9CE08BB5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
Payload.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Payload.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
<- NjRAT 0.7d Horror Edition ->
Botnet
-
Victim
C2
-
21.tcp.cpolar.top:11896
Mutex
-
1334382bc1c003793e1c7d50b799d8c5
Attributes
-
reg_key
1334382bc1c003793e1c7d50b799d8c5
-
splitter
Y262SUCZ4UJJ
Targets
-
- Target Payload.exe
- Size 59KB
- SHA256 c944bf98883c94a3539c2785744ef4f3b46637aa8b7f3a4ca13a3465ccaf91bb
- MD5 f63836798627979b685bcc1086a51ba5
- SHA1 fba03480dfe1e6e269dc743d2c5d8ba05415d5c4
- SHA512 26a0ae488cdcffa740a1487aeee094e492c38c19299202255e22046fd6b25558bfe5abf98c74f707ad4f6458ae8c40930972cd836950dc3cbdb7df0f8cb9ec61
- SSDEEP 1536:Pz7HqYITjUsJiB5dNwl0DaXaxI3pm6Oe:PzjxITxJizdel0DaXaxI3pmh
- TLSH T19B431A0D7BD54944D6BD0BBF84F140120778EC43A622FA1E4AD6A49A3B337C9CE08BB5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10