Overview

overview

10

Static

static

10

Messenger.exe

windows11-21h2-x64

10

Resubmissions

06/04/2024, 04:16

240406-ev9m4aah79 10

05/04/2024, 11:17

240405-ndpq2aah65 10

Sharing

Copy URL Twitter E-mail

General

  • Target

    Messenger.exe

  • Size

    37KB

  • MD5

    0b00ee32e4a898b287f66eaaaaf5d821

  • SHA1

    efdad1b75a0734078e106efc9cf4ed29054dbe21

  • SHA256

    97b12d152964e05ee53f5ca1fd1485b7d80705f304bfa01f805acca7a8640ac8

  • SHA512

    cce1e58716047f0098cda89d9d3f4b9ec06ec96659fd9f49a46d5118932de24f172d7ce1534f0cc25fa63c1dd316d2c8b8dbf39f39f9510dc530209d20ac1f9b

  • SSDEEP

    384:EpymS98iMAcaSGAZ0ytf78vLYgCQVFGrAF+rMRTyN/0L+EcoinblneHQM3epzXqC:6yms72Z3tf78MFQerM+rMRa8Nu02t

Score
10/10
bezmamniynjrat

Malware Config

Extracted

Family

njrat

Version

im523

Botnet

Bezmamniy

C2

links-annually.gl.at.ply.gg:38122

Mutex

6f49e031bcae06e5acaa6054a7054ed6

Attributes
  • reg_key

    6f49e031bcae06e5acaa6054a7054ed6

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Messenger.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections