Resubmissions

08-06-2023 13:04

230608-qa671sgc3y 10

08-06-2023 00:18

230608-alvqcsab5w 10

General

  • Target

    0d8b76317dbfa4482bc07bc247df8f25.exe

  • Size

    31KB

  • MD5

    0d8b76317dbfa4482bc07bc247df8f25

  • SHA1

    236b3b64330227d5d34bda71703945747ecacf06

  • SHA256

    da83ebf186d48f78f9aa8fd6c67d50141c20a104696697373badd324555b4c96

  • SHA512

    807b7f22dd6fc7dece192ecc817d4471772134d4b48c08bd4f689d80aa4cd248eadd6625a2360bfef30f14dd54dd55c99e23ce88d8cf4d2c5af947f1978aa238

  • SSDEEP

    768:8rzgfV5VXPKzxF+dtYjK/L+rvAJQmIDUu0tiJsj:/fqci4QVknj

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

Test1

C2

81.23.151.222:352

Mutex

cced8f41daef86542c6eaefd81723d42

Attributes
  • reg_key

    cced8f41daef86542c6eaefd81723d42

  • splitter

    Y262SUCZ4UJJ

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0d8b76317dbfa4482bc07bc247df8f25.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections