Behavioral task
behavioral1
Sample
sibmne.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
sibmne.exe
Resource
win10v2004-20220414-en
General
-
Target
sibmne.bin
-
Size
31KB
-
MD5
b92b3115473d465d03d54ed3a2a7defa
-
SHA1
6e11bb60d8c01aa6032e927acdcec335b2181007
-
SHA256
d4ffb7e8cefcf9db3e3a8771b05ee02c4f6235a8c13677217a8a49e5cf2dc8bd
-
SHA512
be339251a191bad40a2f7a7e013b717dae439ffa0d9328da5d0fb44ce7659e390fa943b61fceb20ad6bb7e3ee349e4a35f29e548c3b23d96024fdeb4822f6aef
-
SSDEEP
768:epC5qdzNB0zx/6L4nm3GXdvq7QmIDUu0tiQWj:X6KTpUQVkKj
Malware Config
Extracted
njrat
0.7d
MyBot32
4.tcp.eu.ngrok.io:4542
60ba8fa2947818e6663b2c1251a2ccd2
-
reg_key
60ba8fa2947818e6663b2c1251a2ccd2
-
splitter
Y262SUCZ4UJJ
Signatures
-
Njrat family
Files
-
sibmne.bin.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ