njrat | Setup[.]exe

General

Target
Setup.exe
Size 28KB
Sample240421-n3f57aba6v
SHA256 61b34eaa717355a8c09d263ecefb998f4f2b863b1d5db1c2c3eb037471a85406
MD5 ea483304966774e3fc0c311a430bca02
SHA1 e9f03aa33bed377b6a00a6dff44608f78d989ce2
SHA512 93e647adf07b1f6eae7a7c76dbd5e5978f5e9d18feb2ed91b0d0518b25f7c4022aee7ca7e1bb28c8c4fa9cfc73035cea8894e7d2531ce72f60dc052cd31ea679
SSDEEP 384:tLL+lKX1/bnjUWXY5wI/fn/2TdNlfqaLW5Xh11m0LE2uWGCbiNrxwXPRNK62MJOq:lzYn5wI/HYN9fEXr1m0LcWfbXOBFs
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

njrat

Malware Config

Signatures

Njrat family
njrat

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Setup.exe

File Explorer

Setup.exe

.exe 28KB

Setup.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 61b34eaa717355a8c09d263ecefb998f4f2b863b1d5db1c2c3eb037471a85406
MD5 ea483304966774e3fc0c311a430bca02
SHA1 e9f03aa33bed377b6a00a6dff44608f78d989ce2
SHA512 93e647adf07b1f6eae7a7c76dbd5e5978f5e9d18feb2ed91b0d0518b25f7c4022aee7ca7e1bb28c8c4fa9cfc73035cea8894e7d2531ce72f60dc052cd31ea679
SSDEEP 384:tLL+lKX1/bnjUWXY5wI/fn/2TdNlfqaLW5Xh11m0LE2uWGCbiNrxwXPRNK62MJOq:lzYn5wI/HYN9fEXr1m0LcWfbXOBFs
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

35118

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Setup.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

Setup.exe

mscoree

dotnet