Resubmissions

24/06/2024, 00:44

240624-a3jpesvbnk 10

24/06/2024, 00:41

240624-a11j6a1bqg 10

General

  • Target

    NJRat Pepsi Edition v.13.rar

  • Size

    2.0MB

  • MD5

    cf4177aec9ca1c9ae477e78ebd6de438

  • SHA1

    b512229f214c1922b31cccb76595b5e4a2209aa8

  • SHA256

    fef9af2f948dd48545f1efb569b8793504d0a3d07cd1b421ad2c4b089e73871f

  • SHA512

    f02d029b169315cf120f82f90d87767e1561c4992e3f52e6b94bd24f3ea3ea8084f17ca80d561c7034cd790a853e6be6d0bb879773000d8a62e60fbd95332c7e

  • SSDEEP

    49152:gINP4TF1CkFK7qwLk60/hvLXJiPBuYubqPj5TLeZsm:g4Ap1CD7qGk60/x9gdge5TLa

Score
10/10

Malware Config

Extracted

Family

xworm

Version

5.0

aes.plain

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
  • Unsigned PE 12 IoCs

    Checks for missing Authenticode signature.

Files

  • NJRat Pepsi Edition v.13.rar
    .rar
  • Alert.wav
  • GeoIP.dat
  • Mono.Cecil.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugin/cam.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugin/ch.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugin/fun.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugin/inf.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugin/mic.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugin/plg.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugin/pw.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Plugin/sc2.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Stub.manifest
    .xml
  • WinMM.Net.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • njRAT v0.12d0.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • patch.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • stub [SRC].zip
    .zip
  • OK.vb
    .vbs
  • stub.il