MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 7f60a7b2a8bc1a0c0477738c6c26fe8d5807cc1fbd065290034aa4303bbb29fd. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	7f60a7b2a8bc1a0c0477738c6c26fe8d5807cc1fbd065290034aa4303bbb29fd
SHA3-384 hash:	aaba6fb885fdf5bbeab7335226c7b4050ee7445910602a83faaaca0c0a0ea54d6ebe9c9d1df3894be68ee4b65dd88b57
SHA1 hash:	b61297b42d0d354e028a20c3ceec73053c4921a1
MD5 hash:	9e8d43c922112458612b184482c5848f
humanhash:	arizona-quebec-william-michigan
File name:	TRIAL_IMG_00O0125RDER.7z
Download:	download sample
Signature	njrat Alert Create hunting rule
File size:	329'838 bytes
First seen:	2026-05-21 14:28:14 UTC
Last seen:	Never
File type:	7z
MIME type:	application/x-7z-compressed
ssdeep	6144:l+cSvaPm7Y2Mut83f89hM4h0tb95OV1J2pe8ejJy3borpj7krN44Is:l+cRmIJ3DNt55o1JPN4Urpj7krN5b
TLSH	T14E6423DB75D44F58B4979EECAB8DCBC628278E986BD734403DD5ACCA18223D22D84F11
TrID	57.1% (.7Z) 7-Zip compressed archive (v0.4) (8000/1) 42.8% (.7Z) 7-Zip compressed archive (gen) (6000/1)
Magika	sevenzip
Reporter	TomU
Tags:	7z NjRAT

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

49

Origin country :

CH

File Archive Information

This file archive contains 1 file(s), sorted by their relevance:

Relevant files 1

File name:	TRIAL IMG_00O0125RDER.exe
File size:	505'322 bytes
SHA256 hash:	076efef63c51577044a06216c84e1acb0f70f8297fdf514e914fd8c25e2069d2
MD5 hash:	007cf45726919923fac1d55ae6ab79db
MIME type:	application/x-dosexec
Signature	njrat

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

SecuriteInfo.com.NSIS.MalwareX-gen.18534.18548.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Malicious

Verdict:

Malicious

Score:

99.1%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6a0f218498070a72bb9c7616

Tags:

injection obfusc virus

DocGuard Malicious

Result

Verdict:

Malicious

File Type:

PE File

Link:

https://app.docguard.net/7f60a7b2a8bc1a0c0477738c6c26fe8d5807cc1fbd065290034aa4303bbb29fd/results/dashboard

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Tags:

anti-debug evasive installer installer installer-heuristic microsoft_visual_cc nsis reconnaissance smb

Link:

https://www.filescan.io/uploads/6a0f1f77efbd399b39c3a8ce/reports/8489ed7e-7230-4460-95d0-2bb9271d8c2a/overview

Hybrid Analysis Trojan.Generic

Verdict:

Malicious

Labled as:

Trojan.Generic

Link:

https://www.hybrid-analysis.com/sample/7f60a7b2a8bc1a0c0477738c6c26fe8d5807cc1fbd065290034aa4303bbb29fd

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

7z

First seen:

2026-05-21T11:41:00Z UTC

Last seen:

2026-05-21T11:52:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/7f60a7b2a8bc1a0c0477738c6c26fe8d5807cc1fbd065290034aa4303bbb29fd/results?tab=lookup

Nucleon Malprob Malware

Score:

94%

Verdict:

Malware

File Type:

ARCHIVE

Link:

https://malprob.io/report/7f60a7b2a8bc1a0c0477738c6c26fe8d5807cc1fbd065290034aa4303bbb29fd

Malva.RE

Gathering data

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/7f60a7b2a8bc1a0c0477738c6c26fe8d5807cc1fbd065290034aa4303bbb29fd/

ReversingLabs TitaniumCloud Win32.Trojan.Guloader

Threat name:

Win32.Trojan.Guloader

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-05-21 15:37:42 UTC

File Type:

Binary (Archive)

Extracted files:

9

AV detection:

16 of 24 (66.67%)

Threat level:

  5/5

Hatching Triage Suspicious

Result

Malware family:

n/a

Score:

  7/10

Tags:

discovery

Link:

https://tria.ge/reports/260521-sngkmabv8t/

Behaviour

Suspicious behavior: MapViewOfSection

Suspicious use of WriteProcessMemory

Enumerates physical storage devices

System Location Discovery: System Language Discovery

Suspicious use of NtSetInformationThreadHideFromDebugger

Suspicious use of SetThreadContext

Loads dropped DLL

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.