njrat | bIA0[.]exe

General

Target
bIA0.exe
Size 36KB
Sample230106-tk7s3shb52
SHA256 a197bb8b0d29a6b7c273c0474448ca4c5393e5cc4a178ffe1c50abe2da4bbb96
MD5 17c348614f569c5754fab76396cd9cfb
SHA1 4e75c7154f981597b802f7dd579287dad2bfc478
SHA512 884df9fc7c6fd3c058b3db1400ac4c5ffd9b0b6188bc1b1c6ae2cbd8945aa1de5acac021dbce9d54e9975b4ba2039f675c4261482b4202a3bee0c36226cb0430
SSDEEP 384:HLh74EY7AnNlxlehKNOYUiIRdG5DrvvOY2OzRLTm3yilqq6xseeSvN:rGEYW3reOE+5DjOsFLvN
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

hacked njrat

Malware Config

Extracted

Family

njrat

Version

0.7d By Pjoao1578

Botnet

HacKed

C2

https://pastebin.com/raw/HEFUfAcq:5552

Mutex

6a2634340fbf8a0a2c038c6263d49fd1

Attributes

reg_key
6a2634340fbf8a0a2c038c6263d49fd1
splitter
|'|'|

Signatures

Njrat family
njrat

File Explorer

bIA0.exe

.exe 36KB

bIA0.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 a197bb8b0d29a6b7c273c0474448ca4c5393e5cc4a178ffe1c50abe2da4bbb96
MD5 17c348614f569c5754fab76396cd9cfb
SHA1 4e75c7154f981597b802f7dd579287dad2bfc478
SHA512 884df9fc7c6fd3c058b3db1400ac4c5ffd9b0b6188bc1b1c6ae2cbd8945aa1de5acac021dbce9d54e9975b4ba2039f675c4261482b4202a3bee0c36226cb0430
SSDEEP 384:HLh74EY7AnNlxlehKNOYUiIRdG5DrvvOY2OzRLTm3yilqq6xseeSvN:rGEYW3reOE+5DjOsFLvN
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

31502

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Sharing