Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

17/01/2024, 13:33

240117-qtzbhsgge7 10

17/01/2024, 13:28

240117-qq6anagfh5 10

General

  • Target

    Payload2024.exe

  • Size

    27KB

  • MD5

    248679d7c4c333b7b2fef2c0f092327b

  • SHA1

    d5b18fa3fd68935ab01b25db2813250b9d121dbd

  • SHA256

    239e6fe1ce713f9107e88f9b06877e744bea245a699e837e864a6d2b065e6756

  • SHA512

    27efe089952678727053fffcfe4212d330f55ec5a3eee0f7122a9deeff3dee92600db2f3238ae1d11da1d6d8e0a9bc1e48c02b9b8a71ee3129eff5d11ac06dc9

  • SSDEEP

    384:0LUl2J1dJFKnO4YLJ5zeZsL4E7O4/ChZGPjdx4kM0AQk93vmhm7UMKmIEecKdbXi:ipJFPleeHU0A/vMHTi9bD

Score
10/10

Malware Config

Extracted

Family

njrat

Version

v4.0

Botnet

HacKed

C2

soon-lp.at.ply.gg:17209

Mutex

Windows

Attributes
  • reg_key

    Windows

  • splitter

    |-F-|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Payload2024.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections