njrat | bD0b[.]exe

General

Target
bD0b.exe
Size 36KB
Sample220715-pawkvabebr
SHA256 af8d7c18fe97415d7ede0cba166dce004ebbe94eacd1af6f61d8d3527b015e22
MD5 abcf5f7c70c07d21545e780ede1666b6
SHA1 fa55b98ca838409f9b205d1cc4ca26acff7a3ad5
SHA512 da9adf16dc9751719228c179ef4caa1e277dba68e9e30756386be0d2bf8bdf42d2c23a6b02008fcae98fc9598b251c96c3312e372f1f89158540216ba2134e61
SSDEEP 384:SdJZ7wImxZNXAtwvPdOLUtvl8Xe+mzPLTCn2Ie2Ue/S+odLtIanrEp0w:QxwImxjtFOo/8XTT41hnef
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

hacked njrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

https://pasteio.com/raw/xi7uGQDuvPsM:5503

Mutex

6a2634340fbf8a0a2c038c6263d49fd1

Attributes

reg_key
6a2634340fbf8a0a2c038c6263d49fd1
splitter
|'|'|

Signatures

Njrat family
njrat

File Explorer

bD0b.exe

.exe 36KB

bD0b.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 af8d7c18fe97415d7ede0cba166dce004ebbe94eacd1af6f61d8d3527b015e22
MD5 abcf5f7c70c07d21545e780ede1666b6
SHA1 fa55b98ca838409f9b205d1cc4ca26acff7a3ad5
SHA512 da9adf16dc9751719228c179ef4caa1e277dba68e9e30756386be0d2bf8bdf42d2c23a6b02008fcae98fc9598b251c96c3312e372f1f89158540216ba2134e61
SSDEEP 384:SdJZ7wImxZNXAtwvPdOLUtvl8Xe+mzPLTCn2Ie2Ue/S+odLtIanrEp0w:QxwImxjtFOo/8XTT41hnef
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

31006

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Sharing