Overview

overview

10

Static

static

10

fc2631c62f...08.exe

windows7-x64

10

fc2631c62f...08.exe

windows10-2004-x64

10

Resubmissions

24/06/2024, 05:18

240624-fzb33a1fnr 10

24/06/2024, 04:41

240624-fblmlaxdpd 10

24/06/2024, 03:21

240624-dwf7hawcpg 10

Sharing

Copy URL Twitter E-mail

General

  • Target

    bb7170cddabbe302e36414eb9ecae880.bin

  • Size

    11KB

  • MD5

    9e30342a97d018a48d2da86a8a80f052

  • SHA1

    91eef5e90da2b92aa6c168673d7acf322d63bd3e

  • SHA256

    4ad0a67280e6fb6b7e307d599c6362816ef086e505539028f23a4ab8d61eb9bc

  • SHA512

    92074a55939dec02095e2b5b56b161ad63e9a40ffd2e34150d1fd541ef52eef8b35f7dcc9707227a892b24e34eb4d6d25ee2b070528b14d7a7edf4b365d15362

  • SSDEEP

    192:wwb5LUMPX90+CSgxzmxfwx0b2Cf8kKcgdmxs2gHQKkA6e1GS4nU/OnHVtV:woP9D7EznSbUKg4BgHQKkAF1GS2OOn1v

Score
10/10
hackednjrat

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

HacKed

C2

bar-fri.gl.at.ply.gg:36706

Mutex

b3138e85921a1262aba82bcb6c7c507d

Attributes
  • reg_key

    b3138e85921a1262aba82bcb6c7c507d

  • splitter

    |'|'|

Signatures

  • Njrat family
    njrat
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bb7170cddabbe302e36414eb9ecae880.bin
    .zip

    Password: infected

  • fc2631c62f5aadf52a4f83289493d04a5ab8a108d004eb6a55eacbf98df41f08.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections