njrat | ddddddd[.]exe

General

Target
ddddddd.exe
Size 164KB
Sample240611-2b647athkk
SHA256 83114ce40be4d2a9c4c56652795dc0add48350d3c776de0e8f3382cb0d8b9e9c
MD5 eee3f090ebcc9d592fad87c3e7bb7bec
SHA1 30b5566208bac4342e5618a17d575d268e19c9d2
SHA512 4724ed6f6f11086e188c19eecd9b3dcd7bf2115801c68c5c80e00c85bdba74847ee3eeb19db5012b40d131afa2d4b977634e1402b6427b934c66e96e1966bb1c
SSDEEP 3072:aiby/4arEoIfDGVe58N1JlZ+gEru7AdEm6Ga6+bc7tSRn8:ailn585/Mveh3bG
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

njrat

Malware Config

Signatures

Njrat family
njrat

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ddddddd.exe

File Explorer

ddddddd.exe

.exe 164KB

ddddddd.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 83114ce40be4d2a9c4c56652795dc0add48350d3c776de0e8f3382cb0d8b9e9c
MD5 eee3f090ebcc9d592fad87c3e7bb7bec
SHA1 30b5566208bac4342e5618a17d575d268e19c9d2
SHA512 4724ed6f6f11086e188c19eecd9b3dcd7bf2115801c68c5c80e00c85bdba74847ee3eeb19db5012b40d131afa2d4b977634e1402b6427b934c66e96e1966bb1c
SSDEEP 3072:aiby/4arEoIfDGVe58N1JlZ+gEru7AdEm6Ga6+bc7tSRn8:ailn585/Mveh3bG
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

172702

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

ddddddd.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

ddddddd.exe

mscoree

dotnet