Overview

overview

10

Static

static

10

NjRat.0.7D...on.zip

windows10-1703-x64

1

GeoIP.dat

windows10-1703-x64

3

NjRat 0.7D...23.exe

windows10-1703-x64

1

Plugin/cam.dll

windows10-1703-x64

1

Plugin/ch.dll

windows10-1703-x64

1

Plugin/mic.dll

windows10-1703-x64

1

Plugin/plg.dll

windows10-1703-x64

1

Plugin/pw.dll

windows10-1703-x64

1

Plugin/sc2.dll

windows10-1703-x64

1

Server.exe

windows10-1703-x64

10

Sound/Sound.wav

windows10-1703-x64

1

Stub.ps1

windows10-1703-x64

1

Stub.xml

windows10-1703-x64

1

WinMM.Net.dll

windows10-1703-x64

1

nj_users/V...og.rtf

windows10-1703-x64

1

nj_users/X...og.rtf

windows10-1703-x64

1

Resubmissions

06/11/2023, 11:44

231106-nv9sjaah2x 10

06/11/2023, 11:27

231106-nkgc8scd36 10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NjRat.0.7D.Green.Edition.zip

  • Size

    2.2MB

  • MD5

    5e9879dfb0eb64e734c28f514f208418

  • SHA1

    0b5e8d1f6c777a07b6da9de781e7525d6c0b7562

  • SHA256

    72029d0005d9b3130cdbdba3d6d6129a817f073b5eaedd79345729042e586a25

  • SHA512

    df9017285c26e528765e89f70d148f5654dad3797839aff610e017d2afe30b55f3df54a46633ce9dc8de8b984ab3b38db6bcabbb8adf3fb561fa36c9fd383bea

  • SSDEEP

    49152:z91Heasnn4LOb5a7kQdWH7xKQtkWhCTNMH9xf1aawYLngK0posG+:z91Hn80y/7KQyW4TGHfnyosG+

Score
10/10
hackednjrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

hacked

C2

185.204.1.236:1111

Mutex

c15cd7ce3aae2bd6036dd10a665f69f9

Attributes
  • reg_key

    c15cd7ce3aae2bd6036dd10a665f69f9

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 9 IoCs

    Checks for missing Authenticode signature.

Files

  • NjRat.0.7D.Green.Edition.zip
    .zip
  • GeoIP.dat
  • NjRat 0.7D Green Edition by im523.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Plugin/cam.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugin/ch.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugin/mic.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugin/plg.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugin/pw.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugin/sc2.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Server.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • Sound/Sound.wav
  • Stub.il
    .ps1
  • Stub.manifest
    .xml
  • WinMM.Net.dll
    .dll windows:4 windows x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • nj_users/VM-РџРљ_vm_602F4037/Keylog.rtf
    .rtf
  • nj_users/XTREME-HPHU46T6_Администратор_EE0C994/Keylog.rtf
    .rtf