General

  • Target

    TS-240715-NJRAT1.exe

  • Size

    367KB

  • MD5

    6e5f543ff7cee1770c6ce3f18d73c0b6

  • SHA1

    7d4bc06e2b475a0f9b7cb7cd2d6da490c57775f9

  • SHA256

    52d37473705d2bccb3f9b4bfd923c828eabcf75edb424977c5780de68021e964

  • SHA512

    5c97c504702cdc86d342f1ac097cbf80628c34634ecc3cd3bbcf7ad72c00e7f432379faf1c881e8d06acd762c6f39f5a7de5e41bac1ba52fb7a6bfa0f85992a9

  • SSDEEP

    6144:3Lk80UtbLQyHgaolF3tP9Lo5QmdSzHoaoC/HO7mj:39AxlEQmdSzjOyj

Score
7/10

Malware Config

Signatures

  • .NET Reactor proctector 1 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • TS-240715-NJRAT1.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections