General

  • Target

    pcinfecter.7z

  • Size

    16.8MB

  • MD5

    ea78d1ea9761657c99bc813f66be5b1d

  • SHA1

    5a413b515a5e33a6edc141c24d188e56f04fb977

  • SHA256

    08dfc5d0c6bd9da2a041a9974d6bea19d389e0ca7729bd2b7e2b95e4273aaad4

  • SHA512

    23d10d35e6676b92eeba54a4141368926ead36efdf827b54cbf393d6db3929f7eedeffb1b5a2ad791aa6fed2bd9cddac2bd0ca08989d619c9116a8192e941889

  • SSDEEP

    393216:ZrgLxGv5DvdDr9n8B6GJ4X5AmlhRkmrUjsRYCuXVcNpI2Vs0D:ZELx8TdDZ8B6q4XWmlhR3RjuXVOTt

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

ZmVtYWxlLWJvb3N0LmF0LnBseS5nZyAStrik:MTM1NTM=

Mutex

cc85365f4930f81bd81b1412c81c1ff3

Attributes
  • reg_key

    cc85365f4930f81bd81b1412c81c1ff3

  • splitter

    |'|'|

Signatures

Files

  • pcinfecter.7z
    .7z
  • 230227-arjv2sbb37_pw_infected.zip
    .zip

    Password: infected

  • HAPPYYY.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • 230301-an2xfsdd3x_pw_infected.zip
    .zip
  • 230304-v1237see65_pw_infected.zip
    .zip
  • 8cb647b9ff3830b331db3420b21a7455.bin.zip
    .zip
  • FUNTIMEslivparoley.bin.zip
    .zip
  • MONSTERMC PRIVAT VPN.bin.zip
    .zip
  • Nitro Gen.bat.zip
    .zip
  • nanocore-afganisthan.bin.zip
    .zip
  • taskm.bin.zip
    .zip
  • tmpEEC6.tmp.bin.zip
    .zip
  • xxxtan.bin.zip
    .zip