General
- Target 3817933FFC4096BE3CBAD2F690EC026F.exe
- Size 21KB
- Sample261114-aahxesgz9m
- SHA256 0c93e7fdddca0d2bb2e9662a119a7ea1a6a433f1543749aa2a759cf4d8aba6be
- MD5 3817933ffc4096be3cbad2f690ec026f
- SHA1 2900ac50dca3f3e6bbe41af908e78a6bfbb7c88d
- SHA512 a5c7e316b5f7b951dd656877fa7f4ecf94d8d6cb1ce27caf3c00a6a0c563e865fd60e0f5addc014feb5edbe6013b974c17c9e374f8b53b0a01aedaa5c6d50df9
- SSDEEP 384:+W6eUSlLXMMvkJrbtrhCDmHiaOWQ+dcs//34LAZSTW1wxll:v6eUqLXBMRJc6uWQuHqfll
- TLSH T15DA2074EB7648619D3ED1AB809A2631447B1FA8B8951DF4B0CDA20CE2F337D06541BFE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
3817933FFC4096BE3CBAD2F690EC026F.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
3817933FFC4096BE3CBAD2F690EC026F.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
njrat
Version
-
0.7d
Botnet
-
NYAN CAT
C2
-
brushfire-design.torontodirect.info:443
Mutex
-
ssqgq8uz5biu
Attributes
-
reg_key
ssqgq8uz5biu
-
splitter
|'|'|
Targets
-
- Target 3817933FFC4096BE3CBAD2F690EC026F.exe
- Size 21KB
- SHA256 0c93e7fdddca0d2bb2e9662a119a7ea1a6a433f1543749aa2a759cf4d8aba6be
- MD5 3817933ffc4096be3cbad2f690ec026f
- SHA1 2900ac50dca3f3e6bbe41af908e78a6bfbb7c88d
- SHA512 a5c7e316b5f7b951dd656877fa7f4ecf94d8d6cb1ce27caf3c00a6a0c563e865fd60e0f5addc014feb5edbe6013b974c17c9e374f8b53b0a01aedaa5c6d50df9
- SSDEEP 384:+W6eUSlLXMMvkJrbtrhCDmHiaOWQ+dcs//34LAZSTW1wxll:v6eUqLXBMRJc6uWQuHqfll
- TLSH T15DA2074EB7648619D3ED1AB809A2631447B1FA8B8951DF4B0CDA20CE2F337D06541BFE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10