Resubmissions

27/07/2024, 19:00

240727-xn5pnstcpl 10

General

  • Target

    CheatS.exe

  • Size

    93KB

  • MD5

    9ff3fd9c5ff424eb08d54b2e2a5665b5

  • SHA1

    f31ed5665799c4d0cf8eea6d5852ddf3a7b683e3

  • SHA256

    8e6112257bd282d06466710f93a77f1e2f1080324d41f05cb69c9599afee4407

  • SHA512

    78e5bc1f1098e0f20a591140ebf086d6d9327055577f3697a324008d18319c88250a742d0d7805557d85eb1583e77b18ccd8dbe080d59756fa5a37892e87fc72

  • SSDEEP

    1536:IU/r7EkrjaFIs7E5Ox8Jn8LjEwzGi1dDVD4gS:IU7jau5OKVni1dJh

Score
10/10

Malware Config

Extracted

Family

njrat

Version

0.7d

Botnet

чучундра

C2

hakim32.ddns.net:2000

127.0.0.1:5552

Mutex

b4cce598ad7033c01a7f43a5d30da031

Attributes
  • reg_key

    b4cce598ad7033c01a7f43a5d30da031

  • splitter

    |'|'|

Signatures

  • Njrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • CheatS.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections