Resubmissions

24/06/2024, 05:18

240624-fzb33a1fnr10

24/06/2024, 04:41

240624-fblmlaxdpd10

24/06/2024, 03:21

240624-dwf7hawcpg10

General

  • Target
    bb7170cddabbe302e36414eb9ecae880.bin
  • Size 11KB
  • Sample240624-dwf7hawcpg
  • SHA256 4ad0a67280e6fb6b7e307d599c6362816ef086e505539028f23a4ab8d61eb9bc
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10

Malware Config

Extracted

Family
  • njrat

Version
  • 0.7d

Botnet
  • HacKed

C2
  • bar-fri.gl.at.ply.gg:36706

Mutex
  • b3138e85921a1262aba82bcb6c7c507d

Attributes
  • reg_key

    b3138e85921a1262aba82bcb6c7c507d

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • bb7170cddabbe302e36414eb9ecae880.bin
    .zip 11KB
  • fc2631c62f5aadf52a4f83289493d04a5ab8a108d004eb6a55eacbf98df41f08.exe
    .exe 23KB

bb7170cddabbe302e36414eb9ecae880.bin

  • SHA256 4ad0a67280e6fb6b7e307d599c6362816ef086e505539028f23a4ab8d61eb9bc
  • MD5 SHA1 SHA512 SSDEEP
Password
infected