njrat | 33333[.]rar

General

Target
33333.rar
Size 80KB
Sample240426-3ya6psef74
SHA256 8eba93f3b37cde9a09a9240a3026cae850c7bfb0ac9217c7aebc02a610d82ca3
MD5 800b300a99636aa9a00c2dba30a21448
SHA1 1dea778983da0734bdca24478f1f957ab5437e06
SHA512 3f5f03eff75992e26bbe42380dfc31b91f85c89dc3790a9dc66a43434842b9cbc6a52d53cab426aac9fd0374b0d31f3684f6e380ffa3107b805bb7d0e1c26f76
SSDEEP 1536:vwpZBVcxsgCKG+/fEX3hJFYaPrdWhXsP6ulrbaF8hwaahIpHO5uAoiA13db:vwpZBVJEEnhLYajdWBsPHxb1aEO57oiY
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

njrat

Malware Config

Signatures

Njrat family
njrat

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/33333.exe

File Explorer

33333.rar

.rar 80KB
33333.exe

.exe 165KB

33333.rar

SHA256 8eba93f3b37cde9a09a9240a3026cae850c7bfb0ac9217c7aebc02a610d82ca3
MD5 800b300a99636aa9a00c2dba30a21448
SHA1 1dea778983da0734bdca24478f1f957ab5437e06
SHA512 3f5f03eff75992e26bbe42380dfc31b91f85c89dc3790a9dc66a43434842b9cbc6a52d53cab426aac9fd0374b0d31f3684f6e380ffa3107b805bb7d0e1c26f76
SSDEEP 1536:vwpZBVcxsgCKG+/fEX3hJFYaPrdWhXsP6ulrbaF8hwaahIpHO5uAoiA13db:vwpZBVJEEnhLYajdWBsPHxb1aEO57oiY
MD5 SHA1 SHA512 SSDEEP

33333.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 3150b6ae7ce15eeb2a3ccb6951625eea36361f7b4292c7bbb28482898c11b87b
MD5 7b88a43a3874fda3e4eec147a376116e
SHA1 ddb842ed7c097015a754232436e206aec6931d99
SHA512 71e59463619305dffdb584c4617f6034e03f270c8a5f34ae369b72fec8648c93287cac50d4010498a1cf801a29b4fc139793133a5befbc7002108bca39c7f60a
SSDEEP 3072:/dl6I/8cvR8DOkZHJJmUH9wMXpEDzW96UbY6etM0D+JD:llJ2H9wMKPWNbV0De
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

173550

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

33333.rar

33333.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

33333.rar

33333.exe

mscoree

dotnet