Resubmissions

31/05/2023, 06:10

230531-gxelvadf4w 10

31/05/2023, 06:06

230531-gt7s8adb92 10

General

  • Target

    Server.exe

  • Size

    93KB

  • MD5

    c24e2444c22c1c92631e078a1ae4df66

  • SHA1

    22cb31b01af42189c1666a9b607b29a13afa2eba

  • SHA256

    cd208fd09ba669f86baa738c4b2efb870b357fec869c0496909e04b979041ea5

  • SHA512

    1eba2056b504548cf736455afd47ee636d0a46ab3f5f15ab58e19b89c567c82d4fdd73f33492014866087805c1547f274842b444951c5a868a019ec0c8b72c69

  • SSDEEP

    768:lY37KhnWXxyFcxovUKUJuROprXtwN8eYhYbmXxrjEtCdnl2pi1Rz4Rk3rTsGdpc3:IKVWhIUKcuOJnPhBjEwzGi1dDrDcgS

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

THUNDER

C2

FRANSESCOTI3LjAuFRANSESCOC4x:MTk4Nw==

Mutex

a9e12eef6485dd103b324be4d873e428

Attributes
  • reg_key

    a9e12eef6485dd103b324be4d873e428

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Server.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections